From 8e4d958493a8a87141d8a26f61987b3b072d8d69 Mon Sep 17 00:00:00 2001 From: pyshx Date: Fri, 5 Jun 2026 20:24:05 +0530 Subject: [PATCH] ci: pin actions to commit SHAs and bump checkout to Node 24 See villagesql/villagesql-server#616 (migrate GitHub Actions off the deprecated Node 20 runtime). --- .github/workflows/ci.yml | 2 +- .github/workflows/cla.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e6b6d37..aa9482a 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -8,7 +8,7 @@ jobs: contents: read actions: read steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - uses: villagesql/extension-actions/cpp@main with: extension-name: vsql_boolean diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml index 92db0e9..1c1e67e 100644 --- a/.github/workflows/cla.yml +++ b/.github/workflows/cla.yml @@ -20,7 +20,7 @@ jobs: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target' - uses: contributor-assistant/github-action@v2.6.1 + uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 # v2.6.1 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} PERSONAL_ACCESS_TOKEN: ${{ secrets.CLA_PAT }}