From 2de3731a31077ea86799d001113c52c25ffcb465 Mon Sep 17 00:00:00 2001 From: Ingmar Delsink Date: Tue, 10 Nov 2026 17:56:37 +0100 Subject: [PATCH] ci(actions): add workflow dependency lockfile --- .github/workflows/_audit.yml | 2 +- .github/workflows/_lint.yml | 2 +- .github/workflows/_package-publish.yml | 2 +- .github/workflows/_scheduled-audit.yml | 2 +- .github/workflows/_scheduled-test-daily.yml | 8 +- .github/workflows/_scheduled-test-hourly.yml | 2 +- .github/workflows/_test.yml | 10 +- .github/workflows/actions.lock | 148 +++++++++++++++++++ .github/workflows/bump.yml | 2 +- .github/workflows/git-conventions.yml | 4 +- 10 files changed, 165 insertions(+), 17 deletions(-) create mode 100644 .github/workflows/actions.lock diff --git a/.github/workflows/_audit.yml b/.github/workflows/_audit.yml index ec1a445..8b938a1 100644 --- a/.github/workflows/_audit.yml +++ b/.github/workflows/_audit.yml @@ -17,7 +17,7 @@ jobs: fetch-depth: 0 - name: Setup Dev Environment - uses: ./.github/actions/setup-dev-env + uses: $/.github/actions/setup-dev-env - name: Audit run: mise run audit diff --git a/.github/workflows/_lint.yml b/.github/workflows/_lint.yml index cb113b9..9511b52 100644 --- a/.github/workflows/_lint.yml +++ b/.github/workflows/_lint.yml @@ -17,7 +17,7 @@ jobs: fetch-depth: 0 - name: Setup Dev Environment - uses: ./.github/actions/setup-dev-env + uses: $/.github/actions/setup-dev-env - name: Lint run: mise run pre_commit_run_all diff --git a/.github/workflows/_package-publish.yml b/.github/workflows/_package-publish.yml index 8167a1b..acb0cbe 100644 --- a/.github/workflows/_package-publish.yml +++ b/.github/workflows/_package-publish.yml @@ -23,7 +23,7 @@ jobs: fetch-depth: 0 - name: Setup Dev Environment - uses: ./.github/actions/setup-dev-env + uses: $/.github/actions/setup-dev-env - name: Build distribution diff --git a/.github/workflows/_scheduled-audit.yml b/.github/workflows/_scheduled-audit.yml index 3330303..794f6ec 100644 --- a/.github/workflows/_scheduled-audit.yml +++ b/.github/workflows/_scheduled-audit.yml @@ -19,7 +19,7 @@ jobs: fetch-depth: 0 - name: Setup Dev Environment - uses: ./.github/actions/setup-dev-env + uses: $/.github/actions/setup-dev-env - name: Audit shell: bash diff --git a/.github/workflows/_scheduled-test-daily.yml b/.github/workflows/_scheduled-test-daily.yml index e86df30..67213ed 100644 --- a/.github/workflows/_scheduled-test-daily.yml +++ b/.github/workflows/_scheduled-test-daily.yml @@ -30,7 +30,7 @@ jobs: fetch-depth: 0 - name: Setup Dev Environment - uses: ./.github/actions/setup-dev-env + uses: $/.github/actions/setup-dev-env - name: Validate and set environment suffix id: env_suffix @@ -54,7 +54,7 @@ jobs: - name: Test / Unit id: unit continue-on-error: true - uses: ./.github/actions/run-tests + uses: $/.github/actions/run-tests with: test-type: unit mise-task: test_unit @@ -65,7 +65,7 @@ jobs: - name: Test / Integration id: integration continue-on-error: true - uses: ./.github/actions/run-tests + uses: $/.github/actions/run-tests with: test-type: integration mise-task: test_integration @@ -76,7 +76,7 @@ jobs: - name: Test / E2E id: e2e continue-on-error: true - uses: ./.github/actions/run-tests + uses: $/.github/actions/run-tests with: test-type: e2e mise-task: test_e2e diff --git a/.github/workflows/_scheduled-test-hourly.yml b/.github/workflows/_scheduled-test-hourly.yml index 26bda8f..72b8a92 100644 --- a/.github/workflows/_scheduled-test-hourly.yml +++ b/.github/workflows/_scheduled-test-hourly.yml @@ -30,7 +30,7 @@ jobs: fetch-depth: 0 - name: Setup Dev Environment - uses: ./.github/actions/setup-dev-env + uses: $/.github/actions/setup-dev-env - name: Validate and set environment suffix id: env_suffix diff --git a/.github/workflows/_test.yml b/.github/workflows/_test.yml index f9f41cc..e1c1351 100644 --- a/.github/workflows/_test.yml +++ b/.github/workflows/_test.yml @@ -32,7 +32,7 @@ jobs: fetch-depth: 0 - name: Setup Dev Environment - uses: ./.github/actions/setup-dev-env + uses: $/.github/actions/setup-dev-env - name: Release version check if: startsWith(github.ref, 'refs/tags/v') @@ -51,7 +51,7 @@ jobs: echo "Development build - Current version in pyproject.toml: $TOML_VERSION" - name: Test / Unit - uses: ./.github/actions/run-tests + uses: $/.github/actions/run-tests with: test-type: unit mise-task: test_unit @@ -60,7 +60,7 @@ jobs: commit-message: ${{ github.event.head_commit.message }} - name: Test / Integration - uses: ./.github/actions/run-tests + uses: $/.github/actions/run-tests with: test-type: integration mise-task: test_integration @@ -69,7 +69,7 @@ jobs: commit-message: ${{ github.event.head_commit.message }} - name: Test / E2E - uses: ./.github/actions/run-tests + uses: $/.github/actions/run-tests with: test-type: e2e mise-task: test_e2e @@ -78,7 +78,7 @@ jobs: commit-message: ${{ github.event.head_commit.message }} - name: Test / Unit (lowest-direct) - uses: ./.github/actions/run-tests + uses: $/.github/actions/run-tests with: test-type: unit mise-task: test_lowest_direct diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock new file mode 100644 index 0000000..40d235a --- /dev/null +++ b/.github/workflows/actions.lock @@ -0,0 +1,148 @@ +# This file is machine-generated by `gh actions-lock`. +# Do not edit by hand; run `gh actions-lock` to update. +# Docs: https://gh.io/actions-lockfile +version: 'v0.0.3' +workflows: + '.github/workflows/_audit.yml': + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9' + - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195' + '.github/workflows/_codeql.yml': + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'github/codeql-action@9b3254085494b55a0f7c4c2b3d2d52cc712ce370' + '.github/workflows/_lint.yml': + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195' + '.github/workflows/_package-publish.yml': + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195' + - 'slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d' + '.github/workflows/_scheduled-audit.yml': + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9' + - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195' + '.github/workflows/_scheduled-test-daily.yml': + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9' + - 'codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5' + - 'codecov/test-results-action@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3' + - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195' + - 'sonarsource/sonarqube-scan-action@4d1dc0c91ee400dcf8a6dddf2f705ac36542e304' + '.github/workflows/_scheduled-test-hourly.yml': + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9' + - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195' + '.github/workflows/_test.yml': + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9' + - 'codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5' + - 'codecov/test-results-action@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3' + - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195' + - 'sonarsource/sonarqube-scan-action@4d1dc0c91ee400dcf8a6dddf2f705ac36542e304' + '.github/workflows/audit-scheduled.yml': [] + '.github/workflows/bump.yml': + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510' + - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195' + '.github/workflows/check-action-pins.yml': + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'suzuki-shunsuke/pinact-action@b1a1f46bb10f2908950d95f626ca8cc109e2cf7d' + '.github/workflows/ci-cd.yml': [] + '.github/workflows/claude-code-automation-pr-review.yml': + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'anthropics/claude-code-action@d535f5172dec02b204866b393d6b20b9b2aaf98d' + '.github/workflows/codeql-scheduled.yml': [] + '.github/workflows/git-conventions.yml': + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195' + '.github/workflows/labels-sync.yml': + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'crazy-max/ghaction-github-labeler@548a7c3603594ec17c819e1239f281a3b801ab4d' + '.github/workflows/mise-lock-sync.yml': + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195' + - 'stefanzweifel/git-auto-commit-action@d0b01107b5db882071f96de5dd4b54961ea93f4c' + '.github/workflows/test-scheduled-production-daily.yml': [] + '.github/workflows/test-scheduled-production-hourly.yml': [] + '.github/workflows/test-scheduled-staging-daily.yml': [] + '.github/workflows/test-scheduled-staging-hourly.yml': [] +dependencies: + 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1': + ref: 'v7.0.1' + commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' + owner_id: 44036562 + repo_id: 197814629 + 'actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510': + ref: 'v3.3.0' + commit: 'sha1-64ab729a6294000f5aa4a4bc0b73d1f32bc45510' + owner_id: 44036562 + repo_id: 642580244 + 'actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd': + ref: 'v8.0.0' + commit: 'sha1-ed597411d8f924073f98dfc5c65a23a2325f34cd' + owner_id: 44036562 + repo_id: 205262760 + 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9': + ref: 'v7.0.2' + commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9' + owner_id: 44036562 + repo_id: 192625955 + 'anthropics/claude-code-action@d535f5172dec02b204866b393d6b20b9b2aaf98d': + ref: 'v1.0.266' + commit: 'sha1-d535f5172dec02b204866b393d6b20b9b2aaf98d' + owner_id: 76263028 + repo_id: 986421638 + uses: + - 'oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6' + 'codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5': + ref: 'v7.1.1' + commit: 'sha1-303a32d7a59b442fa8d48b6a1cc6825c09c847a5' + owner_id: 8226205 + repo_id: 200299178 + uses: + - 'actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd' + 'codecov/test-results-action@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3': + ref: 'v1.2.1' + commit: 'sha1-0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3' + owner_id: 8226205 + repo_id: 761956558 + 'crazy-max/ghaction-github-labeler@548a7c3603594ec17c819e1239f281a3b801ab4d': + ref: 'v6.0.0' + commit: 'sha1-548a7c3603594ec17c819e1239f281a3b801ab4d' + owner_id: 1951866 + repo_id: 216050313 + 'github/codeql-action@9b3254085494b55a0f7c4c2b3d2d52cc712ce370': + ref: 'v4.39.1' + commit: 'sha1-9b3254085494b55a0f7c4c2b3d2d52cc712ce370' + owner_id: 9919 + repo_id: 259445878 + 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195': + ref: 'v5.2.5' + commit: 'sha1-6612f0ef07ed2a736cd1e00a94a065522dd41195' + owner_id: 216188 + repo_id: 738284564 + 'oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6': + ref: 'v2.2.0' + commit: 'sha1-0c5077e51419868618aeaa5fe8019c62421857d6' + owner_id: 108928776 + repo_id: 512644635 + 'slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d': + ref: 'v4.0.0' + commit: 'sha1-dcb1066f776dd043e64d0e8ba94ca15cc7e1875d' + owner_id: 6962987 + repo_id: 306439799 + 'sonarsource/sonarqube-scan-action@4d1dc0c91ee400dcf8a6dddf2f705ac36542e304': + ref: 'v8.4.0' + commit: 'sha1-4d1dc0c91ee400dcf8a6dddf2f705ac36542e304' + owner_id: 545988 + repo_id: 366408409 + 'stefanzweifel/git-auto-commit-action@d0b01107b5db882071f96de5dd4b54961ea93f4c': + ref: 'v7.2.1' + commit: 'sha1-d0b01107b5db882071f96de5dd4b54961ea93f4c' + owner_id: 1080923 + repo_id: 191163758 + 'suzuki-shunsuke/pinact-action@b1a1f46bb10f2908950d95f626ca8cc109e2cf7d': + ref: 'v3.1.0' + commit: 'sha1-b1a1f46bb10f2908950d95f626ca8cc109e2cf7d' + owner_id: 13323303 + repo_id: 663789591 diff --git a/.github/workflows/bump.yml b/.github/workflows/bump.yml index 610909a..99a5b9d 100644 --- a/.github/workflows/bump.yml +++ b/.github/workflows/bump.yml @@ -31,7 +31,7 @@ jobs: fetch-depth: 0 - name: Setup Dev Environment - uses: ./.github/actions/setup-dev-env + uses: $/.github/actions/setup-dev-env - name: Configure git identity run: | diff --git a/.github/workflows/git-conventions.yml b/.github/workflows/git-conventions.yml index 83c9366..cee0ef6 100644 --- a/.github/workflows/git-conventions.yml +++ b/.github/workflows/git-conventions.yml @@ -61,7 +61,7 @@ jobs: fetch-depth: 0 - name: Setup Dev Environment - uses: ./.github/actions/setup-dev-env + uses: $/.github/actions/setup-dev-env - name: Validate PR title with commitizen env: @@ -88,7 +88,7 @@ jobs: fetch-depth: 0 - name: Setup Dev Environment - uses: ./.github/actions/setup-dev-env + uses: $/.github/actions/setup-dev-env - name: Validate PR commits with commitizen if: github.event_name == 'pull_request'