1414 runs-on : ubuntu-latest
1515 steps :
1616 - name : Validate release PR
17- uses : edgedb/action-release/validate-pr@master
17+ uses : edgedb/action-release/validate-pr@bae6b9134e872166b43d218dd79397c851c41c9a
1818 id : checkver
1919 with :
2020 require_team : Release Managers
3737 mkdir -p dist/
3838 echo "${VERSION}" > dist/VERSION
3939
40- - uses : actions/upload-artifact@v3
40+ - uses : actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
4141 with :
4242 name : dist
4343 path : dist/
@@ -50,12 +50,12 @@ jobs:
5050 PIP_DISABLE_PIP_VERSION_CHECK : 1
5151
5252 steps :
53- - uses : actions/checkout@v3
53+ - uses : actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
5454 with :
5555 fetch-depth : 50
5656 submodules : true
5757
58- - uses : actions/setup-python@v4
58+ - uses : actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
5959 with :
6060 python-version : 3.x
6161
6464 python -m pip install --upgrade setuptools wheel pip
6565 python setup.py sdist
6666
67- - uses : actions/upload-artifact@v3
67+ - uses : actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
6868 with :
6969 name : dist
7070 path : dist/*.tar.*
@@ -76,16 +76,13 @@ jobs:
7676 fail-fast : false
7777 matrix :
7878 os : [ubuntu-latest, macos-latest]
79- cibw_python : ["cp37-*", " cp38-*", "cp39-*", "cp310-*", "cp311-*", "cp312-*"]
79+ cibw_python : ["cp38-*", "cp39-*", "cp310-*", "cp311-*", "cp312-*"]
8080 cibw_arch : ["x86_64", "aarch64", "universal2"]
8181 exclude :
8282 - os : ubuntu-latest
8383 cibw_arch : universal2
8484 - os : macos-latest
8585 cibw_arch : aarch64
86- - os : macos-latest
87- cibw_python : " cp37-*"
88- cibw_arch : universal2
8986
9087 defaults :
9188 run :
@@ -95,14 +92,14 @@ jobs:
9592 PIP_DISABLE_PIP_VERSION_CHECK : 1
9693
9794 steps :
98- - uses : actions/checkout@v3
95+ - uses : actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
9996 with :
10097 fetch-depth : 50
10198 submodules : true
10299
103100 - name : Set up QEMU
104101 if : matrix.os == 'ubuntu-latest' && matrix.cibw_arch == 'aarch64'
105- uses : docker/setup-qemu-action@v1
102+ uses : docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0
106103 with :
107104 platforms : arm64
108105
@@ -111,14 +108,14 @@ jobs:
111108 run : |
112109 brew install gnu-sed libtool autoconf automake
113110
114- 111+ - uses : pypa/cibuildwheel@fff9ec32ed25a9c576750c91e06b410ed0c15db7 # v2.16.2
115112 env :
116113 CIBW_BUILD_VERBOSITY : 1
117114 CIBW_BUILD : ${{ matrix.cibw_python }}
118115 CIBW_ARCHS : ${{ matrix.cibw_arch }}
119116 CIBW_TEST_SKIP : " *universal2:arm64"
120117
121- - uses : actions/upload-artifact@v3
118+ - uses : actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
122119 with :
123120 name : dist
124121 path : wheelhouse/*.whl
@@ -128,12 +125,12 @@ jobs:
128125 runs-on : ubuntu-latest
129126
130127 steps :
131- - uses : actions/checkout@v3
128+ - uses : actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
132129 with :
133130 fetch-depth : 5
134131 submodules : false
135132
136- - uses : actions/download-artifact@v3
133+ - uses : actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
137134 with :
138135 name : dist
139136 path : dist/
@@ -142,11 +139,11 @@ jobs:
142139 id : relver
143140 run : |
144141 set -e
145- echo ::set-output name= version:: $(cat dist/VERSION)
142+ echo version= $(cat dist/VERSION) >> $GITHUB_OUTPUT
146143 rm dist/VERSION
147144
148145 - name : Merge and tag the PR
149- uses : edgedb/action-release/merge@master
146+ uses : edgedb/action-release/merge@bae6b9134e872166b43d218dd79397c851c41c9a
150147 with :
151148 github_token : ${{ secrets.RELEASE_BOT_GITHUB_TOKEN }}
152149 ssh_key : ${{ secrets.RELEASE_BOT_SSH_KEY }}
@@ -169,7 +166,7 @@ jobs:
169166 ls -al dist/
170167
171168 - name : Upload to PyPI
172- uses : pypa/gh-action-pypi-publish@master
169+ uses : pypa/gh-action-pypi-publish@b7f401de30cb6434a1e19f805ff006643653240e # v1.8.10
173170 with :
174171 user : __token__
175172 password : ${{ secrets.PYPI_TOKEN }}
0 commit comments