From db76e28e09c4f4c0aa7e577fa3c6659774ee434d Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 3 Apr 2026 13:01:14 +0000 Subject: [PATCH] Pin all GHA workflow actions to commit SHAs to prevent supply chain attacks MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Replace mutable version tags with pinned commit SHAs across all 23 workflow files. Tags are preserved as inline comments for readability. Also updates peter-evans/create-pull-request to v8.1.0 and lycheeverse/lychee-action to v2.8.0 (latest patch releases). Action → SHA mapping: - actions/checkout v6.0.2 → de0fac2e4500dabe0009e67214ff5f5447ce83dd - r-lib/actions v2 → 6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 - posit-dev/setup-air v1 → 63e80dedb6d275c94a3841e15e5ff8691e1ab237 - reviewdog/action-suggester v1 → aa38384ceb608d00f84b4690cacc83a5aba307ff - JamesIves/github-pages-deploy-action v4.8.0 → d92aa235d04922e8f08b40ce78cc5442fcfbfa2f - lycheeverse/lychee-action v2.8.0 → 8646ba30535128ac92d33dfc9133794bfdd9b411 - peter-evans/create-pull-request v8.1.0 → c0f553fe549906ede9cf27b5156039d195d2ece0 https://claude.ai/code/session_01VSSbUaWppszvDx2WarGMnJ --- .github/workflows/R-CMD-check-hard.yaml | 10 +++++----- .github/workflows/R-CMD-check-main.yaml | 10 +++++----- .github/workflows/R-CMD-check-no-oldrel.yaml | 10 +++++----- .github/workflows/R-CMD-check-pr-short.yaml | 10 +++++----- .github/workflows/R-CMD-check.yaml | 10 +++++----- .github/workflows/check-all-examples.yaml | 6 +++--- .github/workflows/check-link-rot.yaml | 4 ++-- .github/workflows/check-no-warnings.yaml | 6 +++--- .github/workflows/check-random-test-order.yaml | 8 ++++---- .github/workflows/check-readme.yaml | 8 ++++---- .github/workflows/check-spelling.yaml | 4 ++-- .github/workflows/check-styling.yaml | 4 ++-- .github/workflows/check-test-warnings.yaml | 6 +++--- .github/workflows/check-vignette-warnings.yaml | 8 ++++---- .github/workflows/format-suggest.yaml | 6 +++--- .github/workflows/html-5-check.yaml | 8 ++++---- .github/workflows/lint-changed-files.yaml | 6 +++--- .github/workflows/lint.yaml | 6 +++--- .github/workflows/pkgdown-no-suggests.yaml | 8 ++++---- .github/workflows/pkgdown.yaml | 10 +++++----- .github/workflows/test-coverage-examples.yaml | 8 ++++---- .github/workflows/test-coverage.yaml | 8 ++++---- .github/workflows/update-to-latest-easystats.yaml | 8 ++++---- 23 files changed, 86 insertions(+), 86 deletions(-) diff --git a/.github/workflows/R-CMD-check-hard.yaml b/.github/workflows/R-CMD-check-hard.yaml index 5a2cdcb..abdad4f 100644 --- a/.github/workflows/R-CMD-check-hard.yaml +++ b/.github/workflows/R-CMD-check-hard.yaml @@ -19,18 +19,18 @@ jobs: R_KEEP_PKG_SOURCE: yes steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-pandoc@v2 + - uses: r-lib/actions/setup-pandoc@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: pandoc-version: "latest" - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: r-version: "release" use-public-rspm: true - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: dependencies: '"hard"' cache: false @@ -42,7 +42,7 @@ jobs: any::knitr any::rmarkdown - - uses: r-lib/actions/check-r-package@v2 + - uses: r-lib/actions/check-r-package@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: upload-snapshots: true build_args: 'c("--no-manual","--compact-vignettes=gs+qpdf")' diff --git a/.github/workflows/R-CMD-check-main.yaml b/.github/workflows/R-CMD-check-main.yaml index 34ac4ff..e08629f 100644 --- a/.github/workflows/R-CMD-check-main.yaml +++ b/.github/workflows/R-CMD-check-main.yaml @@ -28,18 +28,18 @@ jobs: R_KEEP_PKG_SOURCE: yes steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-pandoc@v2 + - uses: r-lib/actions/setup-pandoc@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: pandoc-version: "latest" - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: r-version: "devel" use-public-rspm: true - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: extra-packages: | any::rcmdcheck @@ -47,7 +47,7 @@ jobs: ivprobit=?ignore-before-r=100.0.0 needs: check - - uses: r-lib/actions/check-r-package@v2 + - uses: r-lib/actions/check-r-package@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: upload-snapshots: true upload-results: true diff --git a/.github/workflows/R-CMD-check-no-oldrel.yaml b/.github/workflows/R-CMD-check-no-oldrel.yaml index 36c9aef..e2e2233 100644 --- a/.github/workflows/R-CMD-check-no-oldrel.yaml +++ b/.github/workflows/R-CMD-check-no-oldrel.yaml @@ -33,18 +33,18 @@ jobs: R_KEEP_PKG_SOURCE: yes steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-pandoc@v2 + - uses: r-lib/actions/setup-pandoc@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: pandoc-version: "latest" - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: r-version: ${{ matrix.config.r }} use-public-rspm: true - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: extra-packages: | any::BH @@ -116,7 +116,7 @@ jobs: WRS2=?ignore-before-r=4.1.0 needs: check - - uses: r-lib/actions/check-r-package@v2 + - uses: r-lib/actions/check-r-package@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: upload-snapshots: true upload-results: true diff --git a/.github/workflows/R-CMD-check-pr-short.yaml b/.github/workflows/R-CMD-check-pr-short.yaml index 5a26e45..b95b1ed 100644 --- a/.github/workflows/R-CMD-check-pr-short.yaml +++ b/.github/workflows/R-CMD-check-pr-short.yaml @@ -31,18 +31,18 @@ jobs: R_KEEP_PKG_SOURCE: yes steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-pandoc@v2 + - uses: r-lib/actions/setup-pandoc@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: pandoc-version: "latest" - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: r-version: (${{ matrix.config.r }}) use-public-rspm: true - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: extra-packages: | any::rcmdcheck @@ -50,7 +50,7 @@ jobs: ivprobit=?ignore-before-r=100.0.0 needs: check - - uses: r-lib/actions/check-r-package@v2 + - uses: r-lib/actions/check-r-package@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: upload-snapshots: true upload-results: true diff --git a/.github/workflows/R-CMD-check.yaml b/.github/workflows/R-CMD-check.yaml index cce250d..9e9b38e 100644 --- a/.github/workflows/R-CMD-check.yaml +++ b/.github/workflows/R-CMD-check.yaml @@ -40,18 +40,18 @@ jobs: R_KEEP_PKG_SOURCE: yes steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-pandoc@v2 + - uses: r-lib/actions/setup-pandoc@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: pandoc-version: "latest" - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: r-version: ${{ matrix.config.r }} use-public-rspm: true - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: extra-packages: | any::BH @@ -123,7 +123,7 @@ jobs: WRS2=?ignore-before-r=4.1.0 needs: check - - uses: r-lib/actions/check-r-package@v2 + - uses: r-lib/actions/check-r-package@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: upload-snapshots: true upload-results: true diff --git a/.github/workflows/check-all-examples.yaml b/.github/workflows/check-all-examples.yaml index 020d848..97c4c52 100644 --- a/.github/workflows/check-all-examples.yaml +++ b/.github/workflows/check-all-examples.yaml @@ -17,14 +17,14 @@ jobs: GITHUB_PAT: ${{ secrets.GITHUB_TOKEN }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: #r-version: "devel" use-public-rspm: true - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: cache-version: 2 extra-packages: | diff --git a/.github/workflows/check-link-rot.yaml b/.github/workflows/check-link-rot.yaml index 7cf9a35..51e8253 100644 --- a/.github/workflows/check-link-rot.yaml +++ b/.github/workflows/check-link-rot.yaml @@ -17,10 +17,10 @@ jobs: GITHUB_PAT: ${{ secrets.GITHUB_TOKEN }} R_KEEP_PKG_SOURCE: yes steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Link Checker id: lychee - uses: lycheeverse/lychee-action@v2 + uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2.8.0 with: fail: true diff --git a/.github/workflows/check-no-warnings.yaml b/.github/workflows/check-no-warnings.yaml index 794b749..56bf233 100644 --- a/.github/workflows/check-no-warnings.yaml +++ b/.github/workflows/check-no-warnings.yaml @@ -12,14 +12,14 @@ jobs: GITHUB_PAT: ${{ secrets.GITHUB_TOKEN }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: r-version: "devel" use-public-rspm: true - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: extra-packages: | any::devtools diff --git a/.github/workflows/check-random-test-order.yaml b/.github/workflows/check-random-test-order.yaml index 541acdb..5401f06 100644 --- a/.github/workflows/check-random-test-order.yaml +++ b/.github/workflows/check-random-test-order.yaml @@ -13,18 +13,18 @@ jobs: GITHUB_PAT: ${{ secrets.GITHUB_TOKEN }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 # needed for easystats tests for dashboard - - uses: r-lib/actions/setup-pandoc@v2 + - uses: r-lib/actions/setup-pandoc@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: pandoc-version: "latest" - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: use-public-rspm: true - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: cache-version: 2 extra-packages: | diff --git a/.github/workflows/check-readme.yaml b/.github/workflows/check-readme.yaml index d9c1f41..92689c7 100644 --- a/.github/workflows/check-readme.yaml +++ b/.github/workflows/check-readme.yaml @@ -27,18 +27,18 @@ jobs: GITHUB_PAT: ${{ secrets.GITHUB_TOKEN }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-pandoc@v2 + - uses: r-lib/actions/setup-pandoc@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: pandoc-version: "latest" - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: r-version: ${{ matrix.config.r }} use-public-rspm: true - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: cache-version: 2 needs: check diff --git a/.github/workflows/check-spelling.yaml b/.github/workflows/check-spelling.yaml index 87c2081..30a15b7 100644 --- a/.github/workflows/check-spelling.yaml +++ b/.github/workflows/check-spelling.yaml @@ -13,9 +13,9 @@ jobs: GITHUB_PAT: ${{ secrets.GITHUB_TOKEN }} R_KEEP_PKG_SOURCE: yes steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: use-public-rspm: true diff --git a/.github/workflows/check-styling.yaml b/.github/workflows/check-styling.yaml index a4478cd..50c7137 100644 --- a/.github/workflows/check-styling.yaml +++ b/.github/workflows/check-styling.yaml @@ -14,10 +14,10 @@ jobs: check-styling: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up Air - uses: posit-dev/setup-air@v1 + uses: posit-dev/setup-air@63e80dedb6d275c94a3841e15e5ff8691e1ab237 # v1 - name: Run air format run: air format --check . diff --git a/.github/workflows/check-test-warnings.yaml b/.github/workflows/check-test-warnings.yaml index 6f4841d..b839501 100644 --- a/.github/workflows/check-test-warnings.yaml +++ b/.github/workflows/check-test-warnings.yaml @@ -17,14 +17,14 @@ jobs: GITHUB_PAT: ${{ secrets.GITHUB_TOKEN }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: #r-version: "devel" use-public-rspm: true - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: cache-version: 2 needs: check diff --git a/.github/workflows/check-vignette-warnings.yaml b/.github/workflows/check-vignette-warnings.yaml index 34569eb..853b009 100644 --- a/.github/workflows/check-vignette-warnings.yaml +++ b/.github/workflows/check-vignette-warnings.yaml @@ -17,18 +17,18 @@ jobs: GITHUB_PAT: ${{ secrets.GITHUB_TOKEN }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-pandoc@v2 + - uses: r-lib/actions/setup-pandoc@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: pandoc-version: "latest" - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: #r-version: "devel" use-public-rspm: true - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: cache-version: 2 needs: check diff --git a/.github/workflows/format-suggest.yaml b/.github/workflows/format-suggest.yaml index aa2c3be..5213ed5 100644 --- a/.github/workflows/format-suggest.yaml +++ b/.github/workflows/format-suggest.yaml @@ -30,18 +30,18 @@ jobs: pull-requests: write steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: ref: ${{ github.event.pull_request.head.sha }} - name: Install - uses: posit-dev/setup-air@v1 + uses: posit-dev/setup-air@63e80dedb6d275c94a3841e15e5ff8691e1ab237 # v1 - name: Format run: air format . - name: Suggest - uses: reviewdog/action-suggester@v1 + uses: reviewdog/action-suggester@aa38384ceb608d00f84b4690cacc83a5aba307ff # v1 with: level: error fail_level: error diff --git a/.github/workflows/html-5-check.yaml b/.github/workflows/html-5-check.yaml index 0b14204..b762a7e 100644 --- a/.github/workflows/html-5-check.yaml +++ b/.github/workflows/html-5-check.yaml @@ -20,14 +20,14 @@ jobs: #_R_CHECK_RD_VALIDATE_RD2HTML_: true steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: #r-version: "devel" use-public-rspm: true - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: cache-version: 2 extra-packages: | @@ -41,7 +41,7 @@ jobs: - name: Install tidy run: sudo apt install tidy - - uses: r-lib/actions/check-r-package@v2 + - uses: r-lib/actions/check-r-package@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: args: 'c("--as-cran", "--no-codoc", "--no-examples", "--no-tests", "--no-vignettes", "--no-build-vignettes", "--ignore-vignettes", "--no-install")' build_args: 'c("--no-build-vignettes")' diff --git a/.github/workflows/lint-changed-files.yaml b/.github/workflows/lint-changed-files.yaml index c1f2f47..916ad24 100644 --- a/.github/workflows/lint-changed-files.yaml +++ b/.github/workflows/lint-changed-files.yaml @@ -16,13 +16,13 @@ jobs: env: GITHUB_PAT: ${{ secrets.GITHUB_TOKEN }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: use-public-rspm: true - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: cache-version: 2 extra-packages: | diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index 33adfd2..5387f9c 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -16,13 +16,13 @@ jobs: env: GITHUB_PAT: ${{ secrets.GITHUB_TOKEN }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: use-public-rspm: true - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: cache-version: 2 extra-packages: | diff --git a/.github/workflows/pkgdown-no-suggests.yaml b/.github/workflows/pkgdown-no-suggests.yaml index 9cc99e4..7467c49 100644 --- a/.github/workflows/pkgdown-no-suggests.yaml +++ b/.github/workflows/pkgdown-no-suggests.yaml @@ -19,17 +19,17 @@ jobs: R_KEEP_PKG_SOURCE: yes steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-pandoc@v2 + - uses: r-lib/actions/setup-pandoc@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: pandoc-version: "latest" - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: use-public-rspm: true - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: dependencies: '"hard"' cache: false diff --git a/.github/workflows/pkgdown.yaml b/.github/workflows/pkgdown.yaml index 1e0f947..588afeb 100644 --- a/.github/workflows/pkgdown.yaml +++ b/.github/workflows/pkgdown.yaml @@ -15,17 +15,17 @@ jobs: env: GITHUB_PAT: ${{ secrets.GITHUB_TOKEN }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-pandoc@v2 + - uses: r-lib/actions/setup-pandoc@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: pandoc-version: "latest" - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: use-public-rspm: true - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: cache-version: 2 extra-packages: | @@ -42,7 +42,7 @@ jobs: - name: Deploy to GitHub pages 🚀 if: github.event_name != 'pull_request' - uses: JamesIves/github-pages-deploy-action@v4.8.0 + uses: JamesIves/github-pages-deploy-action@d92aa235d04922e8f08b40ce78cc5442fcfbfa2f # v4.8.0 with: branch: gh-pages folder: docs diff --git a/.github/workflows/test-coverage-examples.yaml b/.github/workflows/test-coverage-examples.yaml index 8c30fd5..231c5a8 100644 --- a/.github/workflows/test-coverage-examples.yaml +++ b/.github/workflows/test-coverage-examples.yaml @@ -17,17 +17,17 @@ jobs: GITHUB_PAT: ${{ secrets.GITHUB_TOKEN }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-pandoc@v2 + - uses: r-lib/actions/setup-pandoc@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: pandoc-version: "latest" - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: use-public-rspm: true - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: cache-version: 2 extra-packages: | diff --git a/.github/workflows/test-coverage.yaml b/.github/workflows/test-coverage.yaml index d954110..703c43a 100644 --- a/.github/workflows/test-coverage.yaml +++ b/.github/workflows/test-coverage.yaml @@ -19,17 +19,17 @@ jobs: R_KEEP_PKG_SOURCE: yes steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-pandoc@v2 + - uses: r-lib/actions/setup-pandoc@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: pandoc-version: "latest" - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: use-public-rspm: true - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: cache-version: 2 extra-packages: | diff --git a/.github/workflows/update-to-latest-easystats.yaml b/.github/workflows/update-to-latest-easystats.yaml index 5c00a1e..d4c0185 100644 --- a/.github/workflows/update-to-latest-easystats.yaml +++ b/.github/workflows/update-to-latest-easystats.yaml @@ -10,11 +10,11 @@ jobs: update-to-latest-easystats: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: r-lib/actions/setup-r@v2 + - uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 - - uses: r-lib/actions/setup-r-dependencies@v2 + - uses: r-lib/actions/setup-r-dependencies@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2 with: dependencies: '"hard"' extra-packages: | @@ -41,7 +41,7 @@ jobs: - name: Create pull request #if: ${{ steps.update_description.outputs.changed }} - uses: peter-evans/create-pull-request@v8 + uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0 with: token: ${{ secrets.GITHUB_TOKEN }} base: main