From 1bd46cff8b84cdc30a34d03b494b628bb640b1ee Mon Sep 17 00:00:00 2001 From: Dan Fiedler Date: Wed, 16 Sep 2026 10:01:28 -0400 Subject: [PATCH] Pin GitHub Actions to full-length commit SHAs --- .github/dependabot.yml | 11 +++++++++++ .github/workflows/validate.yml | 6 +++--- 2 files changed, 14 insertions(+), 3 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..2c48305b --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,11 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + groups: + github-actions: + patterns: ["*"] + schedule: + interval: "weekly" + cooldown: + default-days: 7 diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml index e8df9a73..eafbd882 100644 --- a/.github/workflows/validate.yml +++ b/.github/workflows/validate.yml @@ -22,10 +22,10 @@ jobs: validate-json-schema: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 - name: Validate JSON schema - uses: dsanders11/json-schema-validate-action@v1.4.0 + uses: dsanders11/json-schema-validate-action@79b2d95a446a0d786f7f244ae7764f8370ff3657 # v1.4.0 with: schema: tests/samples.schema.json files: sample-queries/sample-queries.json @@ -34,7 +34,7 @@ jobs: runs-on: ubuntu-latest needs: validate-json-schema steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 - name: Install run: npm install