fix(deps): pin dependencies (#435)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This commit is contained in:
renovate[bot]
2025-03-31 17:35:22 +02:00
committed by GitHub
parent 598b3ed9d8
commit 9f8a85644b
7 changed files with 80 additions and 80 deletions

View File

@@ -11,18 +11,18 @@ jobs:
id: ghd
uses: proudust/gh-describe@v2
- name: Login to GHCR
uses: docker/login-action@v3
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
with:
username: ${{ secrets.DOCKER_HUB_USERNAME }}
password: ${{ secrets.DOCKER_HUB_PASSWORD }}
- name: Set up QEMU
uses: docker/setup-qemu-action@v3
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3
- name: Docker meta version
if: ${{ github.ref_type == 'tag' }}
id: meta
uses: docker/metadata-action@v5
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5
with:
images: |
vikunja/vikunja
@@ -33,7 +33,7 @@ jobs:
type=raw,value=latest
- name: Build and push unstable
if: ${{ github.ref_type != 'tag' }}
uses: docker/build-push-action@v6
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6
with:
platforms: linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64/v8
push: true
@@ -42,7 +42,7 @@ jobs:
RELEASE_VERSION=${{ steps.ghd.outputs.describe }}
- name: Build and push version
if: ${{ github.ref_type == 'tag' }}
uses: docker/build-push-action@v6
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6
with:
platforms: linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64/v8
push: true
@@ -54,14 +54,14 @@ jobs:
frontend:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
- uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4
name: Install pnpm
with:
run_install: false
package_json_file: frontend/package.json
- name: Install Node.js
uses: actions/setup-node@v4
uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
with:
node-version: 22
cache: 'pnpm'
@@ -72,7 +72,7 @@ jobs:
pnpm install
pnpm build
- name: Store frontend dist
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
with:
name: frontend_dist
path: ./frontend/dist/**/*
@@ -82,19 +82,19 @@ jobs:
needs:
- frontend
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
- name: Git describe
id: ghd
uses: proudust/gh-describe@v2
- uses: actions/setup-go@v5
- uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5
with:
go-version: stable
- name: Download Mage Binary
uses: actions/download-artifact@v4
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
with:
name: mage_bin
- name: get frontend
uses: actions/download-artifact@v4
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
with:
name: frontend_dist
path: frontend/dist
@@ -125,7 +125,7 @@ jobs:
gpg -v --default-key 7D061A4AA61436B40713D42EFF054DACD908493A -b --batch --yes --passphrase "${{ secrets.RELEASE_GPG_PASSPHRASE }}" --pinentry-mode loopback --sign "$file"
done
- name: Upload
uses: kolaente/s3-action@v1.0.1
uses: kolaente/s3-action@c6d17331cd9f6a3cbcfd96b8ade6fbfc502a79e9 # v1.0.1
with:
s3-access-key-id: ${{ secrets.HETZNER_S3_ACCESS_KEY }}
s3-secret-access-key: ${{ secrets.HETZNER_S3_SECRET_KEY }}
@@ -136,7 +136,7 @@ jobs:
files: 'dist/zip/*'
strip-path-prefix: dist/zip/
- name: Store Binaries
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
with:
name: vikunja_bins
path: ./dist/binaries/*
@@ -154,9 +154,9 @@ jobs:
- archlinux
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
- name: Download Vikunja Binary
uses: actions/download-artifact@v4
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
with:
name: vikunja_bins
pattern: vikunja-*-linux-amd64
@@ -164,7 +164,7 @@ jobs:
id: ghd
uses: proudust/gh-describe@v2
- name: Download Mage Binary
uses: actions/download-artifact@v4
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
with:
name: mage_bin
- name: Prepare
@@ -184,7 +184,7 @@ jobs:
target: ./dist/os-packages/vikunja-${{ github.ref_type == 'tag' && steps.ghd.outputs.describe || 'unstable' }}-x86_64.${{ matrix.package }}
config: ./nfpm.yaml
- name: Upload
uses: kolaente/s3-action@v1.0.1
uses: kolaente/s3-action@c6d17331cd9f6a3cbcfd96b8ade6fbfc502a79e9 # v1.0.1
with:
s3-access-key-id: ${{ secrets.HETZNER_S3_ACCESS_KEY }}
s3-secret-access-key: ${{ secrets.HETZNER_S3_SECRET_KEY }}
@@ -198,12 +198,12 @@ jobs:
config-yaml:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
- name: Git describe
id: ghd
uses: proudust/gh-describe@v2
- name: Download Mage Binary
uses: actions/download-artifact@v4
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
with:
name: mage_bin
- name: generate
@@ -211,7 +211,7 @@ jobs:
chmod +x ./mage-static
./mage-static generate:config-yaml 1
- name: Upload to S3
uses: kolaente/s3-action@v1.0.1
uses: kolaente/s3-action@c6d17331cd9f6a3cbcfd96b8ade6fbfc502a79e9 # v1.0.1
with:
s3-access-key-id: ${{ secrets.HETZNER_S3_ACCESS_KEY }}
s3-secret-access-key: ${{ secrets.HETZNER_S3_SECRET_KEY }}
@@ -233,16 +233,16 @@ jobs:
runs-on: ${{ matrix.os }}
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
- name: Git describe
id: ghd
uses: proudust/gh-describe@v2
- name: Install pnpm
uses: pnpm/action-setup@v4
uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4
with:
package_json_file: desktop/package.json
- name: Setup Node
uses: actions/setup-node@v4
uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
with:
node-version: 22
cache: pnpm
@@ -251,7 +251,7 @@ jobs:
if: ${{ runner.os == 'Linux' }}
run: sudo apt-get install --no-install-recommends -y libopenjp2-tools rpm libarchive-tools
- name: get frontend
uses: actions/download-artifact@v4
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
with:
name: frontend_dist
path: frontend/dist
@@ -261,7 +261,7 @@ jobs:
pnpm install --fetch-timeout 100000
node build.js "${{ steps.ghd.outputs.describe }}" ${{ github.ref_type == 'tag' }}
- name: Upload to S3
uses: kolaente/s3-action@v1.0.1
uses: kolaente/s3-action@c6d17331cd9f6a3cbcfd96b8ade6fbfc502a79e9 # v1.0.1
with:
s3-access-key-id: ${{ secrets.HETZNER_S3_ACCESS_KEY }}
s3-secret-access-key: ${{ secrets.HETZNER_S3_SECRET_KEY }}
@@ -278,13 +278,13 @@ jobs:
permissions:
contents: write
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
- name: Download Mage Binary
uses: actions/download-artifact@v4
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
with:
name: mage_bin
- name: Set up Go
uses: actions/setup-go@v5
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5
with:
go-version: stable
- name: generate