2323 starlight : ${{ steps.filter.outputs.starlight }}
2424 steps :
2525 - name : Check out the repo
26- uses : actions/checkout@v4
26+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2727
28- - uses : dorny/paths-filter@v3
28+ - uses : dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
2929 id : filter
3030 with :
3131 filters : |
@@ -43,19 +43,19 @@ jobs:
4343 steps :
4444 - name : Generate GitHub App token
4545 id : generate_token
46- 46+ uses : tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
4747 with :
4848 app_id : ${{ secrets.BOT_APP_ID }}
4949 private_key : ${{ secrets.BOT_PRIVATE_KEY }}
5050
5151 - name : Checkout Repo
52- uses : actions/checkout@v4
52+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
5353
5454 - name : Setup PNPM
55- uses : pnpm/action-setup@v3
55+ uses : pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
5656
5757 - name : Setup Node
58- uses : actions/setup-node@v4
58+ uses : actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
5959 with :
6060 node-version : ${{ env.NODE_VERSION }}
6161 cache : " pnpm"
@@ -64,11 +64,11 @@ jobs:
6464 run : pnpm i
6565
6666 - name : Create Release Pull Request
67- uses : changesets/action@v1
67+ uses : changesets/action@06245a4e0a36c064a573d4150030f5ec548e4fcc # v1.4.10
6868 id : changesets
6969 with :
7070 version : pnpm run version
71- commit : " chore: release"
71+ commit : " [ci] release"
7272 title : " [ci] release"
7373 env :
7474 GITHUB_TOKEN : ${{ steps.generate_token.outputs.token}}
7979 run : |
8080 git checkout changeset-release/main
8181 VERSION=$(node -p "require('./starlight/package.json').version")
82- git commit --amend -m "chore(release): publish v$VERSION" --no-edit
82+ NAME=$(node -p "require('./starlight/package.json').name")
83+ git commit --amend -m "[ci] release $NAME v$VERSION" --no-edit
8384 git push origin changeset-release/main:changeset-release/main --force
8485
8586 image-tag :
8990 IMAGE_TAG : ${{ env.IMAGE_TAG }}
9091 steps :
9192 - name : Check out the repo
92- uses : actions/checkout@v4
93+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
9394
9495 - name : Read version from package.json
9596 id : get_version
@@ -113,17 +114,17 @@ jobs:
113114 contents : write
114115 steps :
115116 - name : Check out the repo
116- uses : actions/checkout@v4
117+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
117118 with :
118119 fetch-depth : 0
119120
120121 - name : Setup PNPM
121- uses : pnpm/action-setup@v3
122+ uses : pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
122123 with :
123124 package_json_file : ./starlight/package.json
124125
125126 - name : Setup Node
126- uses : actions/setup-node@v4
127+ uses : actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
127128 with :
128129 node-version : ${{ env.NODE_VERSION }}
129130 cache : pnpm
@@ -140,22 +141,22 @@ jobs:
140141 working-directory : ./starlight
141142
142143 - name : Set up Docker Buildx
143- uses : docker/setup-buildx-action@v3
144+ uses : docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
144145
145146 - name : Log in to Docker Hub
146- uses : docker/login-action@v3
147+ uses : docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
147148 with :
148149 username : ${{ secrets.DOCKER_USERNAME }}
149150 password : ${{ secrets.DOCKER_PASSWORD }}
150151
151152 - name : Extract metadata (tags, labels) for Docker
152153 id : meta
153- uses : docker/metadata-action@v5
154+ uses : docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
154155 with :
155156 images : ${{ env.REGISTRY }}/${{ env.IMAGE_OWNER }}/${{ env.IMAGE_NAME }}
156157
157158 - name : Build and push Docker image
158- uses : docker/build-push-action@v6
159+ uses : docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
159160 with :
160161 context : .
161162 push : true
@@ -168,7 +169,7 @@ jobs:
168169 run : |
169170 yq eval '.spec.template.spec.containers[0].image = "${{ env.IMAGE_OWNER }}/${{ env.IMAGE_NAME }}:${{ needs.image-tag.outputs.IMAGE_TAG }}"' -i manifest/deployment.yaml
170171
171- - uses : stefanzweifel/git-auto-commit-action@v4
172+ - uses : stefanzweifel/git-auto-commit-action@e348103e9026cc0eee72ae06630dbe30c8bf7a79 # v5.1.0
172173 with :
173174 commit_message : update deployment.json container image (automated)
174175
@@ -180,18 +181,18 @@ jobs:
180181 contents : write
181182 steps :
182183 - name : Check out the repo
183- uses : actions/checkout@v4
184+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
184185
185186 - id : extract-changelog
186- 187+ uses : sean0x42/markdown-extract@7b185cbe85263116bbf741e739e7198ba86465dc # v2.1.0
187188 with :
188189 file : starlight/CHANGELOG.md
189190 pattern : ${{ needs.image-tag.outputs.IMAGE_TAG }}
190191
191192 - uses : ncipollo/release-action@v1
192193 id : create_release
193194 with :
194- tag : ${{ env.IMAGE_NAME }}-docs @${{ needs.image-tag.outputs.IMAGE_TAG }}
195+ tag : ${{ env.IMAGE_NAME }}@${{ needs.image-tag.outputs.IMAGE_TAG }}
195196 makeLatest : true
196197 body : ${{ steps.extract-changelog.outputs.markdown }}
197198 skipIfReleaseExists : true
@@ -209,7 +210,7 @@ jobs:
209210 if : env.RELEASE_SKIPPED == 'false'
210211 env :
211212 DISCORD_WEBHOOK : ${{ secrets.DISCORD_WEBHOOK_URL }}
212- 213+ uses : Ilshidur/action-discord@0c4b27844ba47cb1c7bee539c8eead5284ce9fa9 # 0.3.2
213214 with :
214215 args : |
215216 # ${{ env.IMAGE_NAME }}@${{ needs.image-tag.outputs.IMAGE_TAG }}
0 commit comments