Use exact GitHub Actions versions

This change adds exact version numbers to all GitHub Actions Dependabot will now raise PRs for minor/patch updates
alphagov · Jul 13, 2023 · 5ed0e22 · 5ed0e22
1 parent 88fea75
commit 5ed0e22
Show file tree

Hide file tree

Showing 6 changed files with 22 additions and 22 deletions.
diff --git a/.github/workflows/actions/build/action.yml b/.github/workflows/actions/build/action.yml
@@ -5,7 +5,7 @@ runs:
 
   steps:
     - name: Cache build
-      uses: actions/cache@v3
+      uses: actions/cache@v3.3.1
       id: build-cache
 
       with:

diff --git a/.github/workflows/actions/install-node/action.yml b/.github/workflows/actions/install-node/action.yml
@@ -5,7 +5,7 @@ runs:
 
   steps:
     - name: Cache dependencies
-      uses: actions/cache@v3
+      uses: actions/cache@v3.3.1
       id: npm-install-cache
 
       with:

diff --git a/.github/workflows/diff-change-to-dist.yaml b/.github/workflows/diff-change-to-dist.yaml
@@ -16,7 +16,7 @@ jobs:
     if: ${{ !github.event.pull_request.head.repo.fork }}
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.5.3
         with:
           fetch-depth: 0 # Need to also checkout the base branch to compare
 
@@ -40,14 +40,14 @@ jobs:
           bin/dist-diff.sh origin/$GITHUB_BASE_REF $GITHUB_WORKSPACE
 
       - name: Save distribution diffs
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v3.1.2
         with:
           name: Dist diff
           path: dist*.diff
           if-no-files-found: ignore
 
       - name: Add comment to PR
-        uses: actions/github-script@v6
+        uses: actions/github-script@v6.4.1
         with:
           github-token: ${{secrets.GITHUB_TOKEN}}
           script: |

diff --git a/.github/workflows/sass.yaml b/.github/workflows/sass.yaml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.5.3
 
       - name: Setup Node.js
         uses: actions/setup-node@v3.6.0
@@ -44,7 +44,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.5.3
 
       - name: Setup Node.js
         uses: actions/setup-node@v3.6.0
@@ -73,7 +73,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.5.3
 
       - name: Setup Node.js
         uses: actions/setup-node@v3.6.0
@@ -96,7 +96,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.5.3
 
       - name: Setup Node.js
         uses: actions/setup-node@v3.6.0
@@ -118,7 +118,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.5.3
 
       - name: Setup Ruby
         uses: ruby/setup-ruby@v1
@@ -139,7 +139,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.5.3
 
       - name: Setup Ruby
         uses: ruby/setup-ruby@v1

diff --git a/.github/workflows/screenshots.yml b/.github/workflows/screenshots.yml
@@ -27,13 +27,13 @@ jobs:
         run: echo "::warning title=GitHub Actions secrets::Workflow requires 'PERCY_TOKEN' secret"
 
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.5.3
 
       - name: Install dependencies
         uses: ./.github/workflows/actions/install-node
 
       - name: Cache browser download
-        uses: actions/cache@v3
+        uses: actions/cache@v3.3.1
         with:
           enableCrossOsArchive: true
           key: puppeteer-${{ runner.os }}

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -34,7 +34,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.5.3
 
       - name: Install dependencies
         uses: ./.github/workflows/actions/install-node
@@ -46,7 +46,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.5.3
 
       - name: Restore dependencies
         uses: ./.github/workflows/actions/install-node
@@ -88,14 +88,14 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.5.3
 
       - name: Restore dependencies
         uses: ./.github/workflows/actions/install-node
 
       - name: Cache linter
         if: ${{ matrix.task.cache }}
-        uses: actions/cache@v3
+        uses: actions/cache@v3.3.1
         with:
           enableCrossOsArchive: true
           key: ${{ matrix.task.name }}-${{ runner.os }}
@@ -155,7 +155,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.5.3
 
       - name: Restore dependencies
         uses: ./.github/workflows/actions/install-node
@@ -165,7 +165,7 @@ jobs:
 
       - name: Cache task
         if: ${{ matrix.task.cache }}
-        uses: actions/cache@v3
+        uses: actions/cache@v3.3.1
         with:
           enableCrossOsArchive: true
           key: ${{ matrix.task.name }}-${{ runner.os }}
@@ -175,7 +175,7 @@ jobs:
         run: npx jest --color ${{ format('--maxWorkers={0} --selectProjects "{1}"', env.MAX_WORKERS, join(matrix.task.projects, '", "')) }}
 
       - name: Save test coverage
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v3.1.2
         with:
           name: ${{ matrix.task.description }} coverage
           path: coverage
@@ -204,7 +204,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.5.3
 
       - name: Restore dependencies
         uses: ./.github/workflows/actions/install-node
@@ -247,7 +247,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.5.3
 
       - name: Restore dependencies
         uses: ./.github/workflows/actions/install-node