From 081805e8e8b43075d000c70ae23c045bdc34fe42 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tim=20D=C3=BCsterhus?= Date: Thu, 5 Nov 2026 09:46:26 +0100 Subject: [PATCH] Add `.github/workflows/actions.lock` --- .github/workflows/actions.lock | 93 +++++++++++++++++++++ .github/workflows/close-needs-feedback.yml | 2 +- .github/workflows/integrate.yaml | 24 +++--- .github/workflows/preview-deploy.yml | 16 ++-- .github/workflows/preview-tests.yml | 14 ++-- .github/workflows/remove-needs-feedback.yml | 4 +- 6 files changed, 123 insertions(+), 30 deletions(-) create mode 100644 .github/workflows/actions.lock diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock new file mode 100644 index 0000000000..cc9dc736ea --- /dev/null +++ b/.github/workflows/actions.lock @@ -0,0 +1,93 @@ +# This file is machine-generated by `gh actions-lock`. +# Do not edit by hand; run `gh actions-lock` to update. +# Docs: https://gh.io/actions-lockfile +version: 'v0.0.3' +workflows: + '.github/workflows/close-needs-feedback.yml': + - 'imhoffd/needs-reply@v2.0.0' + '.github/workflows/integrate.yaml': + - 'actions/cache@v6.1.0' + - 'actions/checkout@v7.0.1' + - 'shivammathur/setup-php@2.40.0' + '.github/workflows/pr-closed.yml': + - 'appleboy/ssh-action@v1.2.5' + '.github/workflows/preview-deploy.yml': + - 'actions/download-artifact@v8.0.2' + - 'easingthemes/ssh-deploy@main' + - 'peter-evans/create-or-update-comment@v5.0.0' + - 'peter-evans/find-comment@v4.0.0' + '.github/workflows/preview-tests.yml': + - 'actions/cache@v6.1.0' + - 'actions/checkout@v7.0.1' + - 'actions/setup-node@v7.1.0' + - 'actions/upload-artifact@v7.0.2' + - 'shivammathur/setup-php@2.40.0' + '.github/workflows/remove-needs-feedback.yml': + - 'actions-ecosystem/action-add-labels@v1.1.3' + - 'actions-ecosystem/action-remove-labels@v1.3.0' +dependencies: + 'actions-ecosystem/action-add-labels@v1.1.3': + ref: 'v1.1.3' + commit: 'sha1-18f1af5e3544586314bbe15c0273249c770b2daf' + owner_id: 56633079 + repo_id: 260786220 + 'actions-ecosystem/action-remove-labels@v1.3.0': + ref: 'v1.3.0' + commit: 'sha1-2ce5d41b4b6aa8503e285553f75ed56e0a40bae0' + owner_id: 56633079 + repo_id: 260787457 + 'actions/cache@v6.1.0': + ref: 'v6.1.0' + commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9' + owner_id: 44036562 + repo_id: 215566462 + 'actions/checkout@v7.0.1': + ref: 'v7.0.1' + commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' + owner_id: 44036562 + repo_id: 197814629 + 'actions/download-artifact@v8.0.2': + ref: 'v8.0.2' + commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333' + owner_id: 44036562 + repo_id: 192626254 + 'actions/setup-node@v7.1.0': + ref: 'v7.1.0' + commit: 'sha1-949feb2413d6458794dcd2491c4babbbce0c15c1' + owner_id: 44036562 + repo_id: 189476904 + 'actions/upload-artifact@v7.0.2': + ref: 'v7.0.2' + commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9' + owner_id: 44036562 + repo_id: 192625955 + 'appleboy/ssh-action@v1.2.5': + ref: 'v1.2.5' + commit: 'sha1-0ff4204d59e8e51228ff73bce53f80d53301dee2' + owner_id: 21979 + repo_id: 186202082 + 'easingthemes/ssh-deploy@main': + ref: 'main' + commit: 'sha1-2cc5b27bf3029d0455dd5e09fe02633904031447' + owner_id: 2750284 + repo_id: 210941897 + 'imhoffd/needs-reply@v2.0.0': + ref: 'v2.0.0' + commit: 'sha1-71e8d5144caa0d4a1e292348bfafa3866d08c855' + owner_id: 236501 + repo_id: 271127651 + 'peter-evans/create-or-update-comment@v5.0.0': + ref: 'v5.0.0' + commit: 'sha1-e8674b075228eee787fea43ef493e45ece1004c9' + owner_id: 18365890 + repo_id: 223708643 + 'peter-evans/find-comment@v4.0.0': + ref: 'v4.0.0' + commit: 'sha1-b30e6a3c0ed37e7c023ccd3f1db5c6c0b0c23aad' + owner_id: 18365890 + repo_id: 256447541 + 'shivammathur/setup-php@2.40.0': + ref: '2.40.0' + commit: 'sha1-eb7c497e18156a6bbabfef1d3a82760b9eda3962' + owner_id: 1571086 + repo_id: 206578964 diff --git a/.github/workflows/close-needs-feedback.yml b/.github/workflows/close-needs-feedback.yml index 27231303f1..3fd9d3bac5 100644 --- a/.github/workflows/close-needs-feedback.yml +++ b/.github/workflows/close-needs-feedback.yml @@ -16,7 +16,7 @@ jobs: pull-requests: write steps: - name: Close old issues that need feedback - uses: dwieeb/needs-reply@v2 + uses: imhoffd/needs-reply@v2.0.0 with: repo-token: ${{ secrets.GITHUB_TOKEN }} issue-label: "Status: Needs Feedback" diff --git a/.github/workflows/integrate.yaml b/.github/workflows/integrate.yaml index 42103b874c..c46f1079c9 100644 --- a/.github/workflows/integrate.yaml +++ b/.github/workflows/integrate.yaml @@ -21,10 +21,10 @@ jobs: steps: - name: "Checkout" - uses: "actions/checkout@v7" + uses: "actions/checkout@v7.0.1" - name: "Set up PHP" - uses: "shivammathur/setup-php@v2" + uses: "shivammathur/setup-php@2.40.0" with: coverage: "xdebug" extensions: "none, curl, dom, json, mbstring, tokenizer, xml, xmlwriter, iconv" @@ -40,7 +40,7 @@ jobs: run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >> $GITHUB_ENV" - name: "Cache dependencies installed with composer" - uses: "actions/cache@v6" + uses: "actions/cache@v6.1.0" with: path: "${{ env.COMPOSER_CACHE_DIR }}" key: "php-${{ matrix.php-version }}-composer-${{ hashFiles('composer.lock') }}" @@ -66,10 +66,10 @@ jobs: steps: - name: "Checkout" - uses: "actions/checkout@v7" + uses: "actions/checkout@v7.0.1" - name: "Set up PHP" - uses: "shivammathur/setup-php@v2" + uses: "shivammathur/setup-php@2.40.0" with: coverage: "none" extensions: "none, curl, dom, json, mbstring, tokenizer, xml, xmlwriter, iconv" @@ -85,7 +85,7 @@ jobs: run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >> $GITHUB_ENV" - name: "Cache dependencies installed with composer" - uses: "actions/cache@v6" + uses: "actions/cache@v6.1.0" with: path: "${{ env.COMPOSER_CACHE_DIR }}" key: "php-${{ matrix.php-version }}-composer-${{ hashFiles('composer.lock') }}" @@ -122,10 +122,10 @@ jobs: steps: - name: "Checkout" - uses: "actions/checkout@v7" + uses: "actions/checkout@v7.0.1" - name: "Set up PHP" - uses: "shivammathur/setup-php@v2" + uses: "shivammathur/setup-php@2.40.0" with: coverage: "none" extensions: "none, curl, dom, json, mbstring, tokenizer, xml, xmlwriter, iconv" @@ -138,7 +138,7 @@ jobs: run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >> $GITHUB_ENV" - name: "Cache dependencies installed with composer" - uses: "actions/cache@v6" + uses: "actions/cache@v6.1.0" with: path: "${{ env.COMPOSER_CACHE_DIR }}" key: "php-${{ matrix.php-version }}-composer-${{ hashFiles('composer.lock') }}" @@ -165,10 +165,10 @@ jobs: steps: - name: "Checkout" - uses: "actions/checkout@v7" + uses: "actions/checkout@v7.0.1" - name: "Set up PHP" - uses: "shivammathur/setup-php@v2" + uses: "shivammathur/setup-php@2.40.0" with: coverage: "none" extensions: "none, curl, dom, json, mbstring, tokenizer, xml, xmlwriter, iconv" @@ -184,7 +184,7 @@ jobs: run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >> $GITHUB_ENV" - name: "Cache dependencies installed with composer" - uses: "actions/cache@v6" + uses: "actions/cache@v6.1.0" with: path: "${{ env.COMPOSER_CACHE_DIR }}" key: "php-${{ matrix.php-version }}-composer-${{ hashFiles('composer.lock') }}" diff --git a/.github/workflows/preview-deploy.yml b/.github/workflows/preview-deploy.yml index de76e78a13..db3a64603d 100644 --- a/.github/workflows/preview-deploy.yml +++ b/.github/workflows/preview-deploy.yml @@ -20,7 +20,7 @@ jobs: steps: - name: Download PR number - uses: actions/download-artifact@v8 + uses: actions/download-artifact@v8.0.2 with: name: pr-number.txt path: ./pr-number-artifact/ @@ -34,7 +34,7 @@ jobs: echo "pr_number=$PR_NUMBER" >> $GITHUB_OUTPUT - name: Download PR code as artifact - uses: actions/download-artifact@v8 + uses: actions/download-artifact@v8.0.2 with: name: pr-code path: ./ @@ -56,7 +56,7 @@ jobs: ARGS: "-rlgoDzc" - name: Find existing preview comment - uses: peter-evans/find-comment@v4 + uses: peter-evans/find-comment@v4.0.0 id: fc with: issue-number: ${{ steps.pr-number.outputs.pr_number }} @@ -64,7 +64,7 @@ jobs: body-includes: 'Preview for commit' - name: Create or update preview comment - uses: peter-evans/create-or-update-comment@v5 + uses: peter-evans/create-or-update-comment@v5.0.0 with: issue-number: ${{ steps.pr-number.outputs.pr_number }} comment-id: ${{ steps.fc.outputs.comment-id }} @@ -80,7 +80,7 @@ jobs: steps: - name: Download PR number - uses: actions/download-artifact@v8 + uses: actions/download-artifact@v8.0.2 with: name: pr-number.txt path: ./pr-number-artifact/ @@ -94,7 +94,7 @@ jobs: echo "pr_number=$PR_NUMBER" >> $GITHUB_OUTPUT - name: Download regression report - uses: actions/download-artifact@v8 + uses: actions/download-artifact@v8.0.2 with: name: playwright-report path: ./playwright-report/ @@ -112,7 +112,7 @@ jobs: SCRIPT_BEFORE: bash /home/thephpfoundation/scripts/pr_created_pre.sh web-php-regression-report ${{ steps.pr-number.outputs.pr_number }} - name: Find regression report comment - uses: peter-evans/find-comment@v4 + uses: peter-evans/find-comment@v4.0.0 id: snapshot with: issue-number: ${{ steps.pr-number.outputs.pr_number }} @@ -120,7 +120,7 @@ jobs: body-includes: 'Regression report for commit' - name: Create or update regression report comment - uses: peter-evans/create-or-update-comment@v5 + uses: peter-evans/create-or-update-comment@v5.0.0 with: issue-number: ${{ steps.pr-number.outputs.pr_number }} comment-id: ${{ steps.snapshot.outputs.comment-id }} diff --git a/.github/workflows/preview-tests.yml b/.github/workflows/preview-tests.yml index f91b279128..296612156f 100644 --- a/.github/workflows/preview-tests.yml +++ b/.github/workflows/preview-tests.yml @@ -20,7 +20,7 @@ jobs: HTTP_HOST: "localhost:8080" steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 with: ref: "refs/pull/${{ github.event.number }}/merge" @@ -28,27 +28,27 @@ jobs: run: echo ${{ github.event.number }} > pr-number.txt - name: Upload PR code as artifact - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@v7.0.2 with: name: pr-code path: ./ retention-days: 1 - name: Upload PR number artifact - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@v7.0.2 with: name: pr-number.txt path: ./pr-number.txt retention-days: 1 - - uses: shivammathur/setup-php@v2 + - uses: shivammathur/setup-php@2.40.0 with: coverage: "none" extensions: "none, curl, dom, json, mbstring, tokenizer, xml, xmlwriter, iconv" php-version: "${{ matrix.php-version }}" - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v7 + uses: actions/setup-node@v7.1.0 with: node-version: ${{ matrix.node-version }} @@ -62,7 +62,7 @@ jobs: run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >> $GITHUB_ENV" - name: "Cache dependencies installed with composer" - uses: actions/cache@v6 + uses: actions/cache@v6.1.0 with: path: "${{ env.COMPOSER_CACHE_DIR }}" key: "php-${{ matrix.php-version }}-composer-${{ hashFiles('composer.lock') }}" @@ -81,7 +81,7 @@ jobs: run: "make tests_e2e" - name: Upload playwright report - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@v7.0.2 if: ${{ !cancelled() }} with: name: playwright-report diff --git a/.github/workflows/remove-needs-feedback.yml b/.github/workflows/remove-needs-feedback.yml index 8d1ff3e0a0..f3ca9c474c 100644 --- a/.github/workflows/remove-needs-feedback.yml +++ b/.github/workflows/remove-needs-feedback.yml @@ -16,9 +16,9 @@ jobs: issues: write pull-requests: write steps: - - uses: actions-ecosystem/action-remove-labels@v1 + - uses: actions-ecosystem/action-remove-labels@v1.3.0 with: labels: "Status: Needs Feedback" - - uses: actions-ecosystem/action-add-labels@v1 + - uses: actions-ecosystem/action-add-labels@v1.1.3 with: labels: "Status: Needs Triage"