From b39e80eef375365c9e8c67f840f89610481aef5e Mon Sep 17 00:00:00 2001 From: Pavel Zwerschke Date: Fri, 27 Mar 2026 00:45:13 +0100 Subject: [PATCH 1/2] Pin github actions --- .github/workflows/build.yml | 6 +-- .github/workflows/check-dist.yml | 8 ++-- .github/workflows/label.yml | 2 +- .github/workflows/release.yml | 4 +- .github/workflows/test-cache.yml | 16 ++++---- .github/workflows/test-download.yml | 4 +- .github/workflows/test-post-cleanup.yml | 2 +- .github/workflows/test.yml | 52 ++++++++++++------------- 8 files changed, 47 insertions(+), 47 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index f9853431..80d94150 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -11,15 +11,15 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install pnpm - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0 with: version: 9.15.4 - name: Install Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: node-version: 20 cache: pnpm diff --git a/.github/workflows/check-dist.yml b/.github/workflows/check-dist.yml index 211a0565..cddc0df2 100644 --- a/.github/workflows/check-dist.yml +++ b/.github/workflows/check-dist.yml @@ -12,15 +12,15 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install pnpm - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0 with: version: 10.15.1 - name: Install Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: node-version: 20 cache: pnpm @@ -46,7 +46,7 @@ jobs: id: diff # If index.js or post.js are different than expected, upload the expected version as an artifact - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 if: ${{ failure() && steps.diff.conclusion == 'failure' }} with: name: dist diff --git a/.github/workflows/label.yml b/.github/workflows/label.yml index edcb4b48..fb39ea96 100644 --- a/.github/workflows/label.yml +++ b/.github/workflows/label.yml @@ -8,7 +8,7 @@ jobs: pr-label: runs-on: ubuntu-latest steps: - - uses: mheap/github-action-required-labels@v5 + - uses: mheap/github-action-required-labels@0ac283b4e65c1fb28ce6079dea5546ceca98ccbe # v5.5.2 with: labels: bug,enhancement,ci,documentation,dependencies,ignore-for-release mode: minimum diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 4b70f768..2b3116af 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -12,8 +12,8 @@ jobs: release: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 - - uses: Quantco/ui-actions/version-metadata@v1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: Quantco/ui-actions/version-metadata@adeb1cf49655487534b4ddaab09c3b7bdfd1d628 # v1.0.19 id: version-metadata with: file: ./package.json diff --git a/.github/workflows/test-cache.yml b/.github/workflows/test-cache.yml index 2485dd87..1812bde9 100644 --- a/.github/workflows/test-cache.yml +++ b/.github/workflows/test-cache.yml @@ -21,7 +21,7 @@ jobs: matrix: os: [windows-latest, ubuntu-latest, macos-latest] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: environment-file: test/environment.yml @@ -40,7 +40,7 @@ jobs: matrix: os: [windows-latest, ubuntu-latest, macos-latest] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: environment-file: test/environment.yml @@ -58,7 +58,7 @@ jobs: matrix: os: [windows-latest, ubuntu-latest, macos-latest] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: environment-file: test/environment.yml @@ -77,7 +77,7 @@ jobs: matrix: os: [windows-latest, ubuntu-latest, macos-latest] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: environment-file: test/environment.yml @@ -96,7 +96,7 @@ jobs: matrix: os: [windows-latest, ubuntu-latest, macos-latest] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: environment-file: test/environment.yml @@ -116,7 +116,7 @@ jobs: matrix: os: [windows-latest, ubuntu-latest, macos-latest] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: environment-file: test/environment.yml @@ -136,7 +136,7 @@ jobs: matrix: os: [windows-latest, ubuntu-latest, macos-latest] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: environment-file: test/environment.yml @@ -155,7 +155,7 @@ jobs: matrix: os: [windows-latest, ubuntu-latest, macos-latest] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: # Since the environment is cached, there will be no downloaded packages in $MAMBA_ROOT_PREFIX/pkgs. diff --git a/.github/workflows/test-download.yml b/.github/workflows/test-download.yml index a2bee63e..9849f2b7 100644 --- a/.github/workflows/test-download.yml +++ b/.github/workflows/test-download.yml @@ -12,7 +12,7 @@ jobs: ensure-download: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - run: | echo "exit 1" >> micromamba @@ -30,7 +30,7 @@ jobs: ensure-local-default: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - run: | curl -Ls https://github.com/mamba-org/micromamba-releases/releases/latest/download/micromamba-linux-64 > micromamba sudo cp micromamba /usr/bin/micromamba diff --git a/.github/workflows/test-post-cleanup.yml b/.github/workflows/test-post-cleanup.yml index f9e53110..fe91416b 100644 --- a/.github/workflows/test-post-cleanup.yml +++ b/.github/workflows/test-post-cleanup.yml @@ -39,7 +39,7 @@ jobs: binary-exists: '! ' runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 # This is a fork of webiny/action-post-run. If webiny/action-post-run is updated, this should be updated as well. - uses: lisanna-dettwyler/action-post-run@d053b9b43d788b87a409f6cdb3b6fc87c6c8a4fe with: diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 900c069f..4c0ffda3 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -11,7 +11,7 @@ jobs: no-environment-file: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: environment-name: test @@ -25,7 +25,7 @@ jobs: environment-file: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: environment-file: 'test/environment.yml' @@ -36,7 +36,7 @@ jobs: no-environment: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: micromamba-version: 2.0.2-0 @@ -47,7 +47,7 @@ jobs: micromamba-old-version-1: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: micromamba-version: 1.4.5-0 @@ -58,7 +58,7 @@ jobs: micromamba-old-version-2: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: micromamba-version: 1.2.0-1 # this will throw a warning @@ -72,7 +72,7 @@ jobs: os: [ubuntu-latest, macos-latest] runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: init-shell: '' @@ -90,7 +90,7 @@ jobs: os: [ubuntu-latest, macos-latest, windows-latest] runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: init-shell: bash @@ -102,7 +102,7 @@ jobs: multiple-shell-init: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: init-shell: >- @@ -120,7 +120,7 @@ jobs: cmd: runs-on: windows-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: init-shell: cmd.exe @@ -133,7 +133,7 @@ jobs: cmd-old-micromamba-version: runs-on: windows-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: init-shell: cmd.exe @@ -150,7 +150,7 @@ jobs: os: [ubuntu-latest, macos-latest, windows-latest] runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: init-shell: powershell @@ -167,7 +167,7 @@ jobs: env-variable: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: environment-file: 'test/environment.yml' @@ -179,7 +179,7 @@ jobs: custom-condarc: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: environment-file: 'test/environment.yml' @@ -193,7 +193,7 @@ jobs: conda-lock: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: environment-file: 'test/conda-lock.yml' @@ -205,7 +205,7 @@ jobs: comment-in-environment-file: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: environment-file: 'test/environment2.yml' @@ -220,7 +220,7 @@ jobs: create-args-multiple-spaces-1: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: environment-name: test @@ -233,7 +233,7 @@ jobs: create-args-multiple-spaces-2: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: environment-file: test/environment2.yml @@ -246,7 +246,7 @@ jobs: output-environment-path-env-file: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ id: setup-micromamba with: @@ -258,7 +258,7 @@ jobs: output-environment-path-env-name-overwrite: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ id: setup-micromamba with: @@ -271,7 +271,7 @@ jobs: output-environment-path-custom-root-prefix: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ id: setup-micromamba with: @@ -284,7 +284,7 @@ jobs: output-no-environment-path: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ id: setup-micromamba - run: | @@ -293,7 +293,7 @@ jobs: check-micromamba-on-path: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./ with: init-shell: none @@ -312,7 +312,7 @@ jobs: use-micromamba-from-path: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Download micromamba run: | curl -Ls https://github.com/mamba-org/micromamba-releases/releases/latest/download/micromamba-linux-64 -o /usr/local/bin/micromamba @@ -329,7 +329,7 @@ jobs: no-download-with-custom-path: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Download micromamba run: | mkdir -p "$HOME/not-on-path/bin" @@ -348,7 +348,7 @@ jobs: incorrect-condarc: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 # this should produce a warning - uses: ./ with: @@ -360,7 +360,7 @@ jobs: correct-condarc: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 # this should produce a warning - uses: ./ with: From 50a68adfae98c771cb5bbd6bfde0bd63652620d7 Mon Sep 17 00:00:00 2001 From: Pavel Zwerschke Date: Fri, 27 Mar 2026 00:45:48 +0100 Subject: [PATCH 2/2] bump version --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 0b5ecb53..78c4c963 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "setup-micromamba", - "version": "2.0.7", + "version": "3.0.0", "private": true, "description": "Action to setup micromamba", "scripts": {