From fba70308ee08fd9c6465fb553ee9e75ed2593aeb Mon Sep 17 00:00:00 2001 From: ktro2828 Date: Tue, 27 Oct 2026 11:28:55 +0900 Subject: [PATCH 1/2] ci(actions): replace version numbers into commit sha Signed-off-by: ktro2828 --- .github/workflows/build-and-test.yaml | 8 ++++---- .github/workflows/cancel-previous-workflows.yaml | 2 +- .github/workflows/deploy-document.yaml | 6 ++++-- .github/workflows/pre-commit.yaml | 4 ++-- .github/workflows/release-drafter.yaml | 2 +- 5 files changed, 12 insertions(+), 10 deletions(-) diff --git a/.github/workflows/build-and-test.yaml b/.github/workflows/build-and-test.yaml index b500afa2..982f48af 100644 --- a/.github/workflows/build-and-test.yaml +++ b/.github/workflows/build-and-test.yaml @@ -17,10 +17,10 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - name: Check if relevant files have been changed - uses: dorny/paths-filter@v3 + uses: dorny/paths-filter@9d7afb8d214ad99e78fbd4247752c4caed2b6e4c # v4 id: is-changed with: filters: | @@ -32,7 +32,7 @@ jobs: - name: Define a cache dependency glob if: ${{ steps.is-changed.outputs.changes == 'true'}} - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@ae62891fec2bb8e7d6c99fc78c9fec3a63790f8d # v10 with: python-version: ${{ matrix.python-version }} enable-cache: true @@ -56,7 +56,7 @@ jobs: - name: Get test coverage if: ${{ steps.is-changed.outputs.changes == 'true'}} && ${{ matrix.python-version == '3.10' }} - uses: orgoro/coverage@v3.1 + uses: orgoro/coverage@71cf993a407154ad9d8dd027c88a374b0ed002a9 # v3.3 continue-on-error: true with: coverageFile: ./coverage.xml diff --git a/.github/workflows/cancel-previous-workflows.yaml b/.github/workflows/cancel-previous-workflows.yaml index dc3c8f98..7fdb3f13 100644 --- a/.github/workflows/cancel-previous-workflows.yaml +++ b/.github/workflows/cancel-previous-workflows.yaml @@ -9,7 +9,7 @@ jobs: timeout-minutes: 1 steps: - name: Cancel previous runs - uses: styfle/cancel-workflow-action@0.12.1 + uses: styfle/cancel-workflow-action@d07a454dad7609a92316b57b23c9ccfd4f59af66 # v0.13.1 with: workflow_id: all all_but_latest: true diff --git a/.github/workflows/deploy-document.yaml b/.github/workflows/deploy-document.yaml index c9f177bc..dc83a371 100644 --- a/.github/workflows/deploy-document.yaml +++ b/.github/workflows/deploy-document.yaml @@ -8,10 +8,12 @@ on: workflow_dispatch: inputs: version: + type: string description: "Version to deploy (e.g., v1.0.0, latest, develop)" required: true default: "develop" alias: + type: string description: "Version alias (e.g., latest, stable)" required: false default: "" @@ -23,7 +25,7 @@ jobs: deploy-document: runs-on: ubuntu-slim steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: fetch-depth: 0 @@ -33,7 +35,7 @@ jobs: git config --global user.email "github-actions[bot]@users.noreply.github.com" - name: Define a cache dependency glob - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@ae62891fec2bb8e7d6c99fc78c9fec3a63790f8d # v10 with: python-version: "3.10" cache-dependency-glob: "**/pyproject.toml" diff --git a/.github/workflows/pre-commit.yaml b/.github/workflows/pre-commit.yaml index 26e4e351..d1b7dec7 100644 --- a/.github/workflows/pre-commit.yaml +++ b/.github/workflows/pre-commit.yaml @@ -10,9 +10,9 @@ jobs: timeout-minutes: 5 steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - name: Run pre-commit - uses: autowarefoundation/autoware-github-actions/pre-commit@v1 + uses: autowarefoundation/autoware-github-actions/pre-commit@3e1247bc10813cf9f6b9deb4bebb3eff6bb46ed6 # v1.69.0 with: pre-commit-config: .pre-commit-config.yaml diff --git a/.github/workflows/release-drafter.yaml b/.github/workflows/release-drafter.yaml index e6adfb10..353b8a27 100644 --- a/.github/workflows/release-drafter.yaml +++ b/.github/workflows/release-drafter.yaml @@ -18,6 +18,6 @@ jobs: runs-on: ubuntu-slim timeout-minutes: 1 steps: - - uses: release-drafter/release-drafter@v5 + - uses: release-drafter/release-drafter@978bb0b30c5ee8cdd332ced253758157150d43f0 # v7.10 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} From c145aa31fba419806befa4457f0d7fc663b5ed63 Mon Sep 17 00:00:00 2001 From: ktro2828 Date: Tue, 27 Oct 2026 12:32:20 +0900 Subject: [PATCH 2/2] ci: replace autoware-github-actions for pre-commit with the original one Signed-off-by: ktro2828 --- .github/workflows/pre-commit.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pre-commit.yaml b/.github/workflows/pre-commit.yaml index d1b7dec7..a8a81dce 100644 --- a/.github/workflows/pre-commit.yaml +++ b/.github/workflows/pre-commit.yaml @@ -13,6 +13,6 @@ jobs: uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - name: Run pre-commit - uses: autowarefoundation/autoware-github-actions/pre-commit@3e1247bc10813cf9f6b9deb4bebb3eff6bb46ed6 # v1.69.0 + uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1 with: - pre-commit-config: .pre-commit-config.yaml + extra_args: --config .pre-commit-config.yaml --all-files