From 0a891420ba032e7a4b595ff0ea4d4b426f4d3fd3 Mon Sep 17 00:00:00 2001 From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Date: Mon, 6 Jul 2026 09:58:07 +0000 Subject: [PATCH 1/2] ci: pin GitHub Actions with SHA via pinact Co-Authored-By: Yudai SUZUKI --- .github/workflows/cygwin.yml | 2 +- .github/workflows/macos.yml | 2 +- .github/workflows/wsl.yml | 10 +++++----- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/cygwin.yml b/.github/workflows/cygwin.yml index d822a2e9e217e3..c6a6dc95ebfd10 100644 --- a/.github/workflows/cygwin.yml +++ b/.github/workflows/cygwin.yml @@ -45,7 +45,7 @@ jobs: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Setup Cygwin - uses: cygwin/cygwin-install-action@master + uses: cygwin/cygwin-install-action@3f0a3f9f988f7e96b8c18098ae05eaec175f5b52 # v6 with: packages: ruby gcc-core make autoconf libtool libssl-devel libyaml-devel libffi-devel zlib-devel diff --git a/.github/workflows/macos.yml b/.github/workflows/macos.yml index 6220df9f568786..f9531e6244bb12 100644 --- a/.github/workflows/macos.yml +++ b/.github/workflows/macos.yml @@ -164,7 +164,7 @@ jobs: - name: Resolve job ID id: job_id - uses: actions/github-script@main + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 env: matrix: ${{ toJson(matrix) }} with: diff --git a/.github/workflows/wsl.yml b/.github/workflows/wsl.yml index fe1325ad30fdbd..fe8e22b8b65af5 100644 --- a/.github/workflows/wsl.yml +++ b/.github/workflows/wsl.yml @@ -33,12 +33,12 @@ jobs: uses: Cyberboss/install-winget@1c6f189175e9f015bf1aa113cd1cc6c73efb9d47 # v1.1.1 - name: Install or update WSL - uses: Ubuntu/WSL/.github/actions/wsl-install@main + uses: Ubuntu/WSL/.github/actions/wsl-install@b92552fbda202b184a10752d3c065dc60d1848db # Ubuntu22.04LTS/2204.1.22 with: distro: Ubuntu-24.04 - name: Install dependencies - uses: Ubuntu/WSL/.github/actions/wsl-bash@main + uses: Ubuntu/WSL/.github/actions/wsl-bash@b92552fbda202b184a10752d3c065dc60d1848db # Ubuntu22.04LTS/2204.1.22 with: distro: Ubuntu-24.04 working-dir: /tmp/github/ @@ -47,14 +47,14 @@ jobs: DEBIAN_FRONTEND=noninteractive sudo apt install -y ruby build-essential autoconf libssl-dev libyaml-dev zlib1g-dev libgmp-dev libffi-dev - name: Check out the repository - uses: Ubuntu/WSL/.github/actions/wsl-checkout@main + uses: Ubuntu/WSL/.github/actions/wsl-checkout@b92552fbda202b184a10752d3c065dc60d1848db # Ubuntu22.04LTS/2204.1.22 with: distro: Ubuntu-24.04 working-dir: /tmp/github/ submodules: true - name: Build - uses: Ubuntu/WSL/.github/actions/wsl-bash@main + uses: Ubuntu/WSL/.github/actions/wsl-bash@b92552fbda202b184a10752d3c065dc60d1848db # Ubuntu22.04LTS/2204.1.22 with: distro: Ubuntu-24.04 working-dir: /tmp/github/ @@ -66,7 +66,7 @@ jobs: make -j4 - name: Test - uses: Ubuntu/WSL/.github/actions/wsl-bash@main + uses: Ubuntu/WSL/.github/actions/wsl-bash@b92552fbda202b184a10752d3c065dc60d1848db # Ubuntu22.04LTS/2204.1.22 with: distro: Ubuntu-24.04 working-dir: /tmp/github/ From fcbcc725ce6873ad7cdf759aec13546cc2406be0 Mon Sep 17 00:00:00 2001 From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Date: Mon, 6 Jul 2026 10:00:21 +0000 Subject: [PATCH 2/2] ci: pin Ubuntu/WSL actions to main commit SHA (tag lacks action files) Co-Authored-By: Yudai SUZUKI --- .github/workflows/wsl.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/wsl.yml b/.github/workflows/wsl.yml index fe8e22b8b65af5..54087f221f2af6 100644 --- a/.github/workflows/wsl.yml +++ b/.github/workflows/wsl.yml @@ -33,12 +33,12 @@ jobs: uses: Cyberboss/install-winget@1c6f189175e9f015bf1aa113cd1cc6c73efb9d47 # v1.1.1 - name: Install or update WSL - uses: Ubuntu/WSL/.github/actions/wsl-install@b92552fbda202b184a10752d3c065dc60d1848db # Ubuntu22.04LTS/2204.1.22 + uses: Ubuntu/WSL/.github/actions/wsl-install@f861f1083e518354e4c3637b08c0edfcf8bc3d51 # main with: distro: Ubuntu-24.04 - name: Install dependencies - uses: Ubuntu/WSL/.github/actions/wsl-bash@b92552fbda202b184a10752d3c065dc60d1848db # Ubuntu22.04LTS/2204.1.22 + uses: Ubuntu/WSL/.github/actions/wsl-bash@f861f1083e518354e4c3637b08c0edfcf8bc3d51 # main with: distro: Ubuntu-24.04 working-dir: /tmp/github/ @@ -47,14 +47,14 @@ jobs: DEBIAN_FRONTEND=noninteractive sudo apt install -y ruby build-essential autoconf libssl-dev libyaml-dev zlib1g-dev libgmp-dev libffi-dev - name: Check out the repository - uses: Ubuntu/WSL/.github/actions/wsl-checkout@b92552fbda202b184a10752d3c065dc60d1848db # Ubuntu22.04LTS/2204.1.22 + uses: Ubuntu/WSL/.github/actions/wsl-checkout@f861f1083e518354e4c3637b08c0edfcf8bc3d51 # main with: distro: Ubuntu-24.04 working-dir: /tmp/github/ submodules: true - name: Build - uses: Ubuntu/WSL/.github/actions/wsl-bash@b92552fbda202b184a10752d3c065dc60d1848db # Ubuntu22.04LTS/2204.1.22 + uses: Ubuntu/WSL/.github/actions/wsl-bash@f861f1083e518354e4c3637b08c0edfcf8bc3d51 # main with: distro: Ubuntu-24.04 working-dir: /tmp/github/ @@ -66,7 +66,7 @@ jobs: make -j4 - name: Test - uses: Ubuntu/WSL/.github/actions/wsl-bash@b92552fbda202b184a10752d3c065dc60d1848db # Ubuntu22.04LTS/2204.1.22 + uses: Ubuntu/WSL/.github/actions/wsl-bash@f861f1083e518354e4c3637b08c0edfcf8bc3d51 # main with: distro: Ubuntu-24.04 working-dir: /tmp/github/