ci: Pin all workflow actions (#13984)

This commit is contained in:
कारतोफ्फेलस्क्रिप्ट™
2025-03-18 13:25:17 +01:00
committed by GitHub
parent 918cc51abc
commit 43e14b23b0
21 changed files with 127 additions and 127 deletions

View File

@@ -20,16 +20,16 @@ jobs:
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4.1.1 uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: Azure login - name: Azure login
uses: azure/login@v2.1.1 uses: azure/login@6c251865b4e6290e7b78be643ea2d005bc51f69a # v2.1.1
with: with:
client-id: ${{ secrets.BENCHMARK_ARM_CLIENT_ID }} client-id: ${{ secrets.BENCHMARK_ARM_CLIENT_ID }}
tenant-id: ${{ secrets.BENCHMARK_ARM_TENANT_ID }} tenant-id: ${{ secrets.BENCHMARK_ARM_TENANT_ID }}
subscription-id: ${{ secrets.BENCHMARK_ARM_SUBSCRIPTION_ID }} subscription-id: ${{ secrets.BENCHMARK_ARM_SUBSCRIPTION_ID }}
- uses: actions/setup-node@v4.2.0 - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
with: with:
node-version: 20.x node-version: 20.x

View File

@@ -42,13 +42,13 @@ jobs:
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4.1.1 uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- uses: hashicorp/setup-terraform@v3 - uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3
with: with:
terraform_version: '1.8.5' terraform_version: '1.8.5'
- uses: actions/setup-node@v4.2.0 - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
with: with:
node-version: 20.x node-version: 20.x
@@ -61,7 +61,7 @@ jobs:
run: pnpm install --frozen-lockfile run: pnpm install --frozen-lockfile
- name: Azure login - name: Azure login
uses: azure/login@v2.1.1 uses: azure/login@6c251865b4e6290e7b78be643ea2d005bc51f69a # v2.1.1
with: with:
client-id: ${{ env.ARM_CLIENT_ID }} client-id: ${{ env.ARM_CLIENT_ID }}
tenant-id: ${{ env.ARM_TENANT_ID }} tenant-id: ${{ env.ARM_TENANT_ID }}
@@ -92,7 +92,7 @@ jobs:
# We need to login again because the access token expires # We need to login again because the access token expires
- name: Azure login - name: Azure login
if: always() if: always()
uses: azure/login@v2.1.1 uses: azure/login@6c251865b4e6290e7b78be643ea2d005bc51f69a # v2.1.1
with: with:
client-id: ${{ env.ARM_CLIENT_ID }} client-id: ${{ env.ARM_CLIENT_ID }}
tenant-id: ${{ env.ARM_TENANT_ID }} tenant-id: ${{ env.ARM_TENANT_ID }}

View File

@@ -14,9 +14,9 @@ jobs:
timeout-minutes: 5 timeout-minutes: 5
steps: steps:
- uses: actions/checkout@v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- uses: actions/setup-node@v4.2.0 - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
with: with:
node-version: 20.x node-version: 20.x
@@ -37,7 +37,7 @@ jobs:
run: node .github/scripts/validate-docs-links.js run: node .github/scripts/validate-docs-links.js
- name: Notify Slack on failure - name: Notify Slack on failure
uses: act10ns/slack@v2.0.0 uses: act10ns/slack@ed1309ab9862e57e9e583e51c7889486b9a00b0f # v2.0.0
if: failure() if: failure()
with: with:
status: ${{ job.status }} status: ${{ job.status }}

View File

@@ -15,9 +15,9 @@ jobs:
timeout-minutes: 5 timeout-minutes: 5
steps: steps:
- name: Check out branch - name: Check out branch
uses: actions/checkout@v4.1.1 uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- uses: actions/setup-node@v4.2.0 - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
with: with:
node-version: 20.x node-version: 20.x
@@ -31,6 +31,6 @@ jobs:
- name: Validate PR title - name: Validate PR title
id: validate_pr_title id: validate_pr_title
uses: n8n-io/validate-n8n-pull-request-title@v2.2.0 uses: n8n-io/validate-n8n-pull-request-title@c97ff722ac14ee0bda73766473bba764445db805 # v2.2.0
env: env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

View File

@@ -18,13 +18,13 @@ jobs:
if: github.event.review.state == 'approved' if: github.event.review.state == 'approved'
steps: steps:
- name: Check out current commit - name: Check out current commit
uses: actions/checkout@v4 uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with: with:
ref: ${{ github.event.pull_request.head.sha }} ref: ${{ github.event.pull_request.head.sha }}
fetch-depth: 2 fetch-depth: 2
- name: Determine changed files - name: Determine changed files
uses: tomi/paths-filter-action@v3.0.2 uses: tomi/paths-filter-action@32c62f5ca100c1110406e3477d5b3ecef4666fec # v3.0.2
id: changed id: changed
if: github.event_name == 'pull_request_review' if: github.event_name == 'pull_request_review'
with: with:
@@ -52,11 +52,11 @@ jobs:
) )
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with: with:
fetch-depth: 0 fetch-depth: 0
- uses: actions/setup-node@v4.2.0 - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
with: with:
node-version: 20.x node-version: 20.x
@@ -68,7 +68,7 @@ jobs:
- run: pnpm install --frozen-lockfile - run: pnpm install --frozen-lockfile
- name: Publish to Chromatic - name: Publish to Chromatic
uses: chromaui/action@v11 uses: chromaui/action@c93e0bc3a63aa176e14a75b61a31847cbfdd341c # v11
id: chromatic_tests id: chromatic_tests
continue-on-error: true continue-on-error: true
with: with:
@@ -79,7 +79,7 @@ jobs:
- name: Success comment - name: Success comment
if: steps.chromatic_tests.outcome == 'success' && github.ref != 'refs/heads/master' if: steps.chromatic_tests.outcome == 'success' && github.ref != 'refs/heads/master'
uses: peter-evans/create-or-update-comment@v4.0.0 uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
with: with:
issue-number: ${{ github.event.pull_request.number }} issue-number: ${{ github.event.pull_request.number }}
token: ${{ secrets.GITHUB_TOKEN }} token: ${{ secrets.GITHUB_TOKEN }}
@@ -89,7 +89,7 @@ jobs:
- name: Fail comment - name: Fail comment
if: steps.chromatic_tests.outcome != 'success' && github.ref != 'refs/heads/master' if: steps.chromatic_tests.outcome != 'success' && github.ref != 'refs/heads/master'
uses: peter-evans/create-or-update-comment@v4.0.0 uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
with: with:
issue-number: ${{ github.event.pull_request.number }} issue-number: ${{ github.event.pull_request.number }}
token: ${{ secrets.GITHUB_TOKEN }} token: ${{ secrets.GITHUB_TOKEN }}

View File

@@ -14,9 +14,9 @@ jobs:
timeout-minutes: 10 timeout-minutes: 10
steps: steps:
- uses: actions/checkout@v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- uses: useblacksmith/setup-node@v5 - uses: useblacksmith/setup-node@65c6ca86fdeb0ab3d85e78f57e4f6a7e4780b391 # v5
with: with:
node-version: 20.x node-version: 20.x
@@ -29,13 +29,13 @@ jobs:
run: pnpm install --frozen-lockfile run: pnpm install --frozen-lockfile
- name: Setup build cache - name: Setup build cache
uses: useblacksmith/caching-for-turbo@v1 uses: useblacksmith/caching-for-turbo@bafb57e7ebdbf1185762286ec94d24648cd3938a # v1
- name: Build - name: Build
run: pnpm build run: pnpm build
- name: Cache build artifacts - name: Cache build artifacts
uses: useblacksmith/cache/save@v5 uses: useblacksmith/cache/save@c5fe29eb0efdf1cf4186b9f7fcbbcbc0cf025662 # v5
with: with:
path: ./packages/**/dist path: ./packages/**/dist
key: ${{ github.sha }}-base:build key: ${{ github.sha }}-base:build
@@ -71,7 +71,7 @@ jobs:
needs: [unit-test, lint] needs: [unit-test, lint]
steps: steps:
- name: Notify Slack on failure - name: Notify Slack on failure
uses: act10ns/slack@v2.0.0 uses: act10ns/slack@ed1309ab9862e57e9e583e51c7889486b9a00b0f # v2.0.0
if: failure() if: failure()
with: with:
status: ${{ job.status }} status: ${{ job.status }}

View File

@@ -22,9 +22,9 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
if: github.event_name != 'pull_request_review' || startsWith(github.event.pull_request.base.ref, 'release/') if: github.event_name != 'pull_request_review' || startsWith(github.event.pull_request.base.ref, 'release/')
steps: steps:
- uses: actions/checkout@v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- uses: actions/setup-node@v4.2.0 - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
with: with:
node-version: 20.x node-version: 20.x
@@ -36,13 +36,13 @@ jobs:
- run: pnpm install --frozen-lockfile - run: pnpm install --frozen-lockfile
- name: Setup build cache - name: Setup build cache
uses: rharkor/caching-for-turbo@v1.5 uses: rharkor/caching-for-turbo@439abec0d28d21b192fa8817b744ffdf1ee5ac0d # v1.5
- name: Build Backend - name: Build Backend
run: pnpm build:backend run: pnpm build:backend
- name: Cache build artifacts - name: Cache build artifacts
uses: actions/cache/save@v4.2.0 uses: actions/cache/save@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
with: with:
path: ./packages/**/dist path: ./packages/**/dist
key: ${{ github.sha }}:db-tests key: ${{ github.sha }}:db-tests
@@ -56,9 +56,9 @@ jobs:
DB_TYPE: sqlite DB_TYPE: sqlite
DB_SQLITE_POOL_SIZE: 4 DB_SQLITE_POOL_SIZE: 4
steps: steps:
- uses: actions/checkout@v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- uses: actions/setup-node@v4.2.0 - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
with: with:
node-version: 20.x node-version: 20.x
@@ -70,10 +70,10 @@ jobs:
- run: pnpm install --frozen-lockfile - run: pnpm install --frozen-lockfile
- name: Setup build cache - name: Setup build cache
uses: rharkor/caching-for-turbo@v1.5 uses: rharkor/caching-for-turbo@439abec0d28d21b192fa8817b744ffdf1ee5ac0d # v1.5
- name: Restore cached build artifacts - name: Restore cached build artifacts
uses: actions/cache/restore@v4.2.0 uses: actions/cache/restore@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
with: with:
path: ./packages/**/dist path: ./packages/**/dist
key: ${{ github.sha }}:db-tests key: ${{ github.sha }}:db-tests
@@ -90,9 +90,9 @@ jobs:
env: env:
DB_MYSQLDB_PASSWORD: password DB_MYSQLDB_PASSWORD: password
steps: steps:
- uses: actions/checkout@v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- uses: actions/setup-node@v4.2.0 - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
with: with:
node-version: 20.x node-version: 20.x
@@ -104,16 +104,16 @@ jobs:
- run: pnpm install --frozen-lockfile - run: pnpm install --frozen-lockfile
- name: Setup build cache - name: Setup build cache
uses: rharkor/caching-for-turbo@v1.5 uses: rharkor/caching-for-turbo@439abec0d28d21b192fa8817b744ffdf1ee5ac0d # v1.5
- name: Restore cached build artifacts - name: Restore cached build artifacts
uses: actions/cache/restore@v4.2.0 uses: actions/cache/restore@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
with: with:
path: ./packages/**/dist path: ./packages/**/dist
key: ${{ github.sha }}:db-tests key: ${{ github.sha }}:db-tests
- name: Start MariaDB - name: Start MariaDB
uses: isbang/compose-action@v2.0.0 uses: isbang/compose-action@802a148945af6399a338c7906c267331b39a71af # v2.0.0
with: with:
compose-file: ./.github/docker-compose.yml compose-file: ./.github/docker-compose.yml
services: | services: |
@@ -134,9 +134,9 @@ jobs:
env: env:
DB_MYSQLDB_PASSWORD: password DB_MYSQLDB_PASSWORD: password
steps: steps:
- uses: actions/checkout@v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- uses: actions/setup-node@v4.2.0 - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
with: with:
node-version: 20.x node-version: 20.x
@@ -148,16 +148,16 @@ jobs:
- run: pnpm install --frozen-lockfile - run: pnpm install --frozen-lockfile
- name: Setup build cache - name: Setup build cache
uses: rharkor/caching-for-turbo@v1.5 uses: rharkor/caching-for-turbo@439abec0d28d21b192fa8817b744ffdf1ee5ac0d # v1.5
- name: Restore cached build artifacts - name: Restore cached build artifacts
uses: actions/cache/restore@v4.2.0 uses: actions/cache/restore@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
with: with:
path: ./packages/**/dist path: ./packages/**/dist
key: ${{ github.sha }}:db-tests key: ${{ github.sha }}:db-tests
- name: Start MySQL - name: Start MySQL
uses: isbang/compose-action@v2.0.0 uses: isbang/compose-action@802a148945af6399a338c7906c267331b39a71af # v2.0.0
with: with:
compose-file: ./.github/docker-compose.yml compose-file: ./.github/docker-compose.yml
services: | services: |
@@ -176,9 +176,9 @@ jobs:
DB_POSTGRESDB_PASSWORD: password DB_POSTGRESDB_PASSWORD: password
DB_POSTGRESDB_POOL_SIZE: 1 # Detect connection pooling deadlocks DB_POSTGRESDB_POOL_SIZE: 1 # Detect connection pooling deadlocks
steps: steps:
- uses: actions/checkout@v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- uses: actions/setup-node@v4.2.0 - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
with: with:
node-version: 20.x node-version: 20.x
@@ -190,16 +190,16 @@ jobs:
- run: pnpm install --frozen-lockfile - run: pnpm install --frozen-lockfile
- name: Setup build cache - name: Setup build cache
uses: rharkor/caching-for-turbo@v1.5 uses: rharkor/caching-for-turbo@439abec0d28d21b192fa8817b744ffdf1ee5ac0d # v1.5
- name: Restore cached build artifacts - name: Restore cached build artifacts
uses: actions/cache/restore@v4.2.0 uses: actions/cache/restore@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
with: with:
path: ./packages/**/dist path: ./packages/**/dist
key: ${{ github.sha }}:db-tests key: ${{ github.sha }}:db-tests
- name: Start Postgres - name: Start Postgres
uses: isbang/compose-action@v2.0.0 uses: isbang/compose-action@802a148945af6399a338c7906c267331b39a71af # v2.0.0
with: with:
compose-file: ./.github/docker-compose.yml compose-file: ./.github/docker-compose.yml
services: | services: |
@@ -215,7 +215,7 @@ jobs:
needs: [mariadb, postgres, mysql] needs: [mariadb, postgres, mysql]
steps: steps:
- name: Notify Slack on failure - name: Notify Slack on failure
uses: act10ns/slack@v2.0.0 uses: act10ns/slack@ed1309ab9862e57e9e583e51c7889486b9a00b0f # v2.0.0
if: failure() && github.ref == 'refs/heads/master' if: failure() && github.ref == 'refs/heads/master'
with: with:
status: ${{ job.status }} status: ${{ job.status }}

View File

@@ -13,11 +13,11 @@ jobs:
env: env:
NODE_OPTIONS: '--max-old-space-size=4096' NODE_OPTIONS: '--max-old-space-size=4096'
steps: steps:
- uses: actions/checkout@v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with: with:
ref: refs/pull/${{ github.event.pull_request.number }}/merge ref: refs/pull/${{ github.event.pull_request.number }}/merge
- uses: useblacksmith/setup-node@v5 - uses: useblacksmith/setup-node@65c6ca86fdeb0ab3d85e78f57e4f6a7e4780b391 # v5
with: with:
node-version: 20.x node-version: 20.x
@@ -30,7 +30,7 @@ jobs:
run: pnpm install --frozen-lockfile run: pnpm install --frozen-lockfile
- name: Setup build cache - name: Setup build cache
uses: useblacksmith/caching-for-turbo@v1 uses: useblacksmith/caching-for-turbo@bafb57e7ebdbf1185762286ec94d24648cd3938a # v1
- name: Build - name: Build
run: pnpm build run: pnpm build
@@ -42,7 +42,7 @@ jobs:
run: pnpm typecheck run: pnpm typecheck
- name: Cache build artifacts - name: Cache build artifacts
uses: useblacksmith/cache/save@v5 uses: useblacksmith/cache/save@c5fe29eb0efdf1cf4186b9f7fcbbcbc0cf025662 # v5
with: with:
path: ./packages/**/dist path: ./packages/**/dist
key: ${{ github.sha }}-base:build key: ${{ github.sha }}-base:build

View File

@@ -17,29 +17,29 @@ jobs:
build: build:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: Set up QEMU - name: Set up QEMU
uses: docker/setup-qemu-action@v3.3.0 uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3.3.0
- name: Set up Docker Buildx - name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3.8.0 uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0
- name: Login to GitHub Container Registry - name: Login to GitHub Container Registry
uses: docker/login-action@v3.3.0 uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
with: with:
registry: ghcr.io registry: ghcr.io
username: ${{ github.actor }} username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.GITHUB_TOKEN }}
- name: Login to DockerHub - name: Login to DockerHub
uses: docker/login-action@v3.3.0 uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
with: with:
username: ${{ secrets.DOCKER_USERNAME }} username: ${{ secrets.DOCKER_USERNAME }}
password: ${{ secrets.DOCKER_PASSWORD }} password: ${{ secrets.DOCKER_PASSWORD }}
- name: Build - name: Build
uses: docker/build-push-action@v6.11.0 uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0
env: env:
DOCKER_BUILD_SUMMARY: false DOCKER_BUILD_SUMMARY: false
with: with:

View File

@@ -16,23 +16,23 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: Set up QEMU - name: Set up QEMU
uses: docker/setup-qemu-action@v3.3.0 uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3.3.0
- name: Set up Docker Buildx - name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3.8.0 uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0
- name: Login to GitHub Container Registry - name: Login to GitHub Container Registry
uses: docker/login-action@v3.3.0 uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
with: with:
registry: ghcr.io registry: ghcr.io
username: ${{ github.actor }} username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.GITHUB_TOKEN }}
- name: Build - name: Build
uses: docker/build-push-action@v6.11.0 uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0
env: env:
DOCKER_BUILD_SUMMARY: false DOCKER_BUILD_SUMMARY: false
with: with:

View File

@@ -39,7 +39,7 @@ jobs:
shell: bash shell: bash
- name: Checkout - name: Checkout
uses: actions/checkout@v4.1.1 uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with: with:
ref: ${{ github.event.inputs.branch }} ref: ${{ github.event.inputs.branch }}
@@ -49,20 +49,20 @@ jobs:
shell: bash shell: bash
- name: Set up QEMU - name: Set up QEMU
uses: docker/setup-qemu-action@v3.3.0 uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3.3.0
- name: Set up Docker Buildx - name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3.8.0 uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0
- name: Login to GHCR - name: Login to GHCR
uses: docker/login-action@v3.3.0 uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
with: with:
registry: ghcr.io registry: ghcr.io
username: ${{ github.actor }} username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.GITHUB_TOKEN }}
- name: Build and push image to GHCR - name: Build and push image to GHCR
uses: docker/build-push-action@v6.11.0 uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0
env: env:
DOCKER_BUILD_SUMMARY: false DOCKER_BUILD_SUMMARY: false
with: with:

View File

@@ -10,29 +10,29 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4.1.1 uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: Set up QEMU - name: Set up QEMU
uses: docker/setup-qemu-action@v3.3.0 uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3.3.0
- name: Set up Docker Buildx - name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3.8.0 uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0
- name: Login to GHCR - name: Login to GHCR
uses: docker/login-action@v3.3.0 uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
with: with:
registry: ghcr.io registry: ghcr.io
username: ${{ github.actor }} username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.GITHUB_TOKEN }}
- name: Login to DockerHub - name: Login to DockerHub
uses: docker/login-action@v3.3.0 uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
with: with:
username: ${{ secrets.DOCKER_USERNAME }} username: ${{ secrets.DOCKER_USERNAME }}
password: ${{ secrets.DOCKER_PASSWORD }} password: ${{ secrets.DOCKER_PASSWORD }}
- name: Build and push image to GHCR and DockerHub - name: Build and push image to GHCR and DockerHub
uses: docker/build-push-action@v6.11.0 uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0
env: env:
DOCKER_BUILD_SUMMARY: false DOCKER_BUILD_SUMMARY: false
with: with:

View File

@@ -71,7 +71,7 @@ jobs:
image: cypress/${{ inputs.run-env }} image: cypress/${{ inputs.run-env }}
options: --user 1001 options: --user 1001
steps: steps:
- uses: actions/checkout@v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with: with:
ref: ${{ inputs.branch }} ref: ${{ inputs.branch }}
@@ -81,13 +81,13 @@ jobs:
git fetch origin pull/${{ inputs.pr_number }}/head git fetch origin pull/${{ inputs.pr_number }}/head
git checkout FETCH_HEAD git checkout FETCH_HEAD
- uses: pnpm/action-setup@v4.0.0 - uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0
- name: Install dependencies - name: Install dependencies
run: pnpm install --frozen-lockfile run: pnpm install --frozen-lockfile
- name: Cypress build - name: Cypress build
uses: cypress-io/github-action@v6.6.1 uses: cypress-io/github-action@1b70233146622b69e789ccdd4f9452adc638d25a # v6.6.1
with: with:
# Disable running of tests within install job # Disable running of tests within install job
runTests: false runTests: false
@@ -99,7 +99,7 @@ jobs:
run: pnpm cypress:install run: pnpm cypress:install
- name: Cache build artifacts - name: Cache build artifacts
uses: actions/cache/save@v4.2.0 uses: actions/cache/save@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
with: with:
path: | path: |
/github/home/.cache /github/home/.cache
@@ -120,7 +120,7 @@ jobs:
# running the same tests multiple times # running the same tests multiple times
containers: ${{ fromJSON( inputs.spec == 'e2e/*' && inputs.containers || '[1]' ) }} containers: ${{ fromJSON( inputs.spec == 'e2e/*' && inputs.containers || '[1]' ) }}
steps: steps:
- uses: actions/checkout@v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with: with:
ref: ${{ inputs.branch }} ref: ${{ inputs.branch }}
@@ -130,10 +130,10 @@ jobs:
git fetch origin pull/${{ inputs.pr_number }}/head git fetch origin pull/${{ inputs.pr_number }}/head
git checkout FETCH_HEAD git checkout FETCH_HEAD
- uses: pnpm/action-setup@v4.0.0 - uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0
- name: Restore cached pnpm modules - name: Restore cached pnpm modules
uses: actions/cache/restore@v4.2.0 uses: actions/cache/restore@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
with: with:
path: | path: |
/github/home/.cache /github/home/.cache
@@ -145,7 +145,7 @@ jobs:
run: pnpm install --frozen-lockfile run: pnpm install --frozen-lockfile
- name: Cypress run - name: Cypress run
uses: cypress-io/github-action@v6.6.1 uses: cypress-io/github-action@1b70233146622b69e789ccdd4f9452adc638d25a # v6.6.1
with: with:
working-directory: cypress working-directory: cypress
install: false install: false

View File

@@ -15,13 +15,13 @@ jobs:
if: github.event.review.state == 'approved' if: github.event.review.state == 'approved'
steps: steps:
- name: Check out current commit - name: Check out current commit
uses: actions/checkout@v4 uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
with: with:
ref: ${{ github.event.pull_request.head.sha }} ref: ${{ github.event.pull_request.head.sha }}
fetch-depth: 2 fetch-depth: 2
- name: Determine changed files - name: Determine changed files
uses: tomi/paths-filter-action@v3.0.2 uses: tomi/paths-filter-action@32c62f5ca100c1110406e3477d5b3ecef4666fec # v3.0.2
id: changed id: changed
with: with:
filters: | filters: |
@@ -63,7 +63,7 @@ jobs:
steps: steps:
- name: E2E success comment - name: E2E success comment
if: ${{ needs.get-metadata.outputs.should_run == 'true' && needs.run-e2e-tests.outputs.tests_passed == 'true' }} if: ${{ needs.get-metadata.outputs.should_run == 'true' && needs.run-e2e-tests.outputs.tests_passed == 'true' }}
uses: peter-evans/create-or-update-comment@v4.0.0 uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
with: with:
issue-number: ${{ github.event.pull_request.number }} issue-number: ${{ github.event.pull_request.number }}
body: | body: |
@@ -72,7 +72,7 @@ jobs:
- name: E2E fail comment - name: E2E fail comment
if: needs.run-e2e-tests.result == 'failure' if: needs.run-e2e-tests.result == 'failure'
uses: peter-evans/create-or-update-comment@v4.0.0 uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
with: with:
issue-number: ${{ github.event.pull_request.number }} issue-number: ${{ github.event.pull_request.number }}
body: | body: |

View File

@@ -56,7 +56,7 @@ jobs:
if: ${{ github.event.inputs.success-url != '' }} if: ${{ github.event.inputs.success-url != '' }}
steps: steps:
- name: Notify Slack on failure - name: Notify Slack on failure
uses: act10ns/slack@v2.0.0 uses: act10ns/slack@ed1309ab9862e57e9e583e51c7889486b9a00b0f # v2.0.0
if: failure() if: failure()
with: with:
status: ${{ job.status }} status: ${{ job.status }}

View File

@@ -21,11 +21,11 @@ jobs:
env: env:
NODE_OPTIONS: '--max-old-space-size=4096' NODE_OPTIONS: '--max-old-space-size=4096'
steps: steps:
- uses: actions/checkout@v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with: with:
ref: ${{ inputs.ref }} ref: ${{ inputs.ref }}
- uses: useblacksmith/setup-node@v5 - uses: useblacksmith/setup-node@65c6ca86fdeb0ab3d85e78f57e4f6a7e4780b391 # v5
with: with:
node-version: 20.x node-version: 20.x
@@ -38,7 +38,7 @@ jobs:
run: pnpm install --frozen-lockfile run: pnpm install --frozen-lockfile
- name: Setup build cache - name: Setup build cache
uses: useblacksmith/caching-for-turbo@v1 uses: useblacksmith/caching-for-turbo@bafb57e7ebdbf1185762286ec94d24648cd3938a # v1
- name: Build - name: Build
if: ${{ inputs.cacheKey == '' }} if: ${{ inputs.cacheKey == '' }}
@@ -46,7 +46,7 @@ jobs:
- name: Restore cached build artifacts - name: Restore cached build artifacts
if: ${{ inputs.cacheKey != '' }} if: ${{ inputs.cacheKey != '' }}
uses: useblacksmith/cache/restore@v5 uses: useblacksmith/cache/restore@c5fe29eb0efdf1cf4186b9f7fcbbcbc0cf025662 # v5
with: with:
path: ./packages/**/dist path: ./packages/**/dist
key: ${{ inputs.cacheKey }} key: ${{ inputs.cacheKey }}

View File

@@ -15,7 +15,7 @@ jobs:
(github.event_name == 'pull_request' && github.event.pull_request.merged == true) || (github.event_name == 'pull_request' && github.event.pull_request.merged == true) ||
(github.event_name == 'pull_request' && github.event.pull_request.merged == false && github.event.action == 'closed') (github.event_name == 'pull_request' && github.event.pull_request.merged == false && github.event.action == 'closed')
steps: steps:
- uses: fjogeleit/http-request-action@dea46570591713c7de04a5b556bf2ff7bdf0aa9c # v1 - uses: fjogeleit/http-request-action@bf78da14118941f7e940279dd58f67e863cbeff6 # v1
if: ${{!contains(github.event.pull_request.labels.*.name, 'community')}} if: ${{!contains(github.event.pull_request.labels.*.name, 'community')}}
name: Notify name: Notify
env: env:

View File

@@ -30,12 +30,12 @@ jobs:
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4.1.1 uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with: with:
fetch-depth: 0 fetch-depth: 0
ref: ${{ github.event.inputs.base-branch }} ref: ${{ github.event.inputs.base-branch }}
- uses: actions/setup-node@v4.2.0 - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
with: with:
node-version: 20.x node-version: 20.x
@@ -60,7 +60,7 @@ jobs:
git push -f origin refs/remotes/origin/${{ github.event.inputs.base-branch }}:refs/heads/release/${{ env.NEXT_RELEASE }} git push -f origin refs/remotes/origin/${{ github.event.inputs.base-branch }}:refs/heads/release/${{ env.NEXT_RELEASE }}
- name: Push the release branch, and Create the PR - name: Push the release branch, and Create the PR
uses: peter-evans/create-pull-request@v6 uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6
with: with:
base: 'release/${{ env.NEXT_RELEASE }}' base: 'release/${{ env.NEXT_RELEASE }}'
branch: 'release-pr/${{ env.NEXT_RELEASE }}' branch: 'release-pr/${{ env.NEXT_RELEASE }}'

View File

@@ -21,11 +21,11 @@ jobs:
release: ${{ steps.set-release.outputs.release }} release: ${{ steps.set-release.outputs.release }}
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4.1.1 uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with: with:
fetch-depth: 0 fetch-depth: 0
- uses: actions/setup-node@v4.2.0 - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
with: with:
node-version: 20.x node-version: 20.x
@@ -43,7 +43,7 @@ jobs:
run: pnpm build run: pnpm build
- name: Cache build artifacts - name: Cache build artifacts
uses: actions/cache/save@v4.2.0 uses: actions/cache/save@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
with: with:
path: ./packages/**/dist path: ./packages/**/dist
key: ${{ github.sha }}-release:build key: ${{ github.sha }}-release:build
@@ -78,31 +78,31 @@ jobs:
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4.1.1 uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with: with:
fetch-depth: 0 fetch-depth: 0
- name: Set up QEMU - name: Set up QEMU
uses: docker/setup-qemu-action@v3.3.0 uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3.3.0
- name: Set up Docker Buildx - name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3.8.0 uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0
- name: Login to GitHub Container Registry - name: Login to GitHub Container Registry
uses: docker/login-action@v3.3.0 uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
with: with:
registry: ghcr.io registry: ghcr.io
username: ${{ github.actor }} username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.GITHUB_TOKEN }}
- name: Login to DockerHub - name: Login to DockerHub
uses: docker/login-action@v3.3.0 uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
with: with:
username: ${{ secrets.DOCKER_USERNAME }} username: ${{ secrets.DOCKER_USERNAME }}
password: ${{ secrets.DOCKER_PASSWORD }} password: ${{ secrets.DOCKER_PASSWORD }}
- name: Build - name: Build
uses: docker/build-push-action@v6.11.0 uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0
env: env:
DOCKER_BUILD_SUMMARY: false DOCKER_BUILD_SUMMARY: false
with: with:
@@ -129,7 +129,7 @@ jobs:
steps: steps:
- name: Create a Release on GitHub - name: Create a Release on GitHub
uses: ncipollo/release-action@v1 uses: ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174 # v1
with: with:
commit: ${{github.event.pull_request.base.ref}} commit: ${{github.event.pull_request.base.ref}}
tag: 'n8n@${{ needs.publish-to-npm.outputs.release }}' tag: 'n8n@${{ needs.publish-to-npm.outputs.release }}'
@@ -148,15 +148,15 @@ jobs:
SENTRY_ORG: ${{ secrets.SENTRY_ORG }} SENTRY_ORG: ${{ secrets.SENTRY_ORG }}
steps: steps:
- uses: actions/checkout@v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: Restore cached build artifacts - name: Restore cached build artifacts
uses: actions/cache/restore@v4.2.0 uses: actions/cache/restore@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
with: with:
path: ./packages/**/dist path: ./packages/**/dist
key: ${{ github.sha }}-release:build key: ${{ github.sha }}-release:build
- name: Create a frontend release - name: Create a frontend release
uses: getsentry/action-release@v1.7.0 uses: getsentry/action-release@e769183448303de84c5a06aaaddf9da7be26d6c7 # v1.7.0
continue-on-error: true continue-on-error: true
with: with:
projects: ${{ secrets.SENTRY_FRONTEND_PROJECT }} projects: ${{ secrets.SENTRY_FRONTEND_PROJECT }}
@@ -164,7 +164,7 @@ jobs:
sourcemaps: packages/frontend/editor-ui/dist sourcemaps: packages/frontend/editor-ui/dist
- name: Create a backend release - name: Create a backend release
uses: getsentry/action-release@v1.7.0 uses: getsentry/action-release@e769183448303de84c5a06aaaddf9da7be26d6c7 # v1.7.0
continue-on-error: true continue-on-error: true
with: with:
projects: ${{ secrets.SENTRY_BACKEND_PROJECT }} projects: ${{ secrets.SENTRY_BACKEND_PROJECT }}
@@ -172,7 +172,7 @@ jobs:
sourcemaps: packages/cli/dist packages/core/dist packages/nodes-base/dist packages/@n8n/n8n-nodes-langchain/dist sourcemaps: packages/cli/dist packages/core/dist packages/nodes-base/dist packages/@n8n/n8n-nodes-langchain/dist
- name: Create a task runner release - name: Create a task runner release
uses: getsentry/action-release@v1.7.0 uses: getsentry/action-release@e769183448303de84c5a06aaaddf9da7be26d6c7 # v1.7.0
continue-on-error: true continue-on-error: true
with: with:
projects: ${{ secrets.SENTRY_TASK_RUNNER_PROJECT }} projects: ${{ secrets.SENTRY_TASK_RUNNER_PROJECT }}
@@ -194,8 +194,8 @@ jobs:
# if: ${{ github.event.pull_request.merged == true && !contains(github.event.pull_request.labels.*.name, 'release:patch') }} # if: ${{ github.event.pull_request.merged == true && !contains(github.event.pull_request.labels.*.name, 'release:patch') }}
# runs-on: ubuntu-latest # runs-on: ubuntu-latest
# steps: # steps:
# - uses: actions/checkout@v4.1.1 # - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
# with: # v4.1.1
# fetch-depth: 0 # fetch-depth: 0
# - run: | # - run: |
# git checkout --track origin/master # git checkout --track origin/master

View File

@@ -22,7 +22,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
timeout-minutes: 5 timeout-minutes: 5
steps: steps:
- uses: actions/setup-node@v4.2.0 - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
with: with:
node-version: 20.x node-version: 20.x
@@ -43,7 +43,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
timeout-minutes: 5 timeout-minutes: 5
steps: steps:
- uses: docker/login-action@v3.3.0 - uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
with: with:
username: ${{ secrets.DOCKER_USERNAME }} username: ${{ secrets.DOCKER_USERNAME }}
password: ${{ secrets.DOCKER_PASSWORD }} password: ${{ secrets.DOCKER_PASSWORD }}
@@ -63,7 +63,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
timeout-minutes: 5 timeout-minutes: 5
steps: steps:
- uses: docker/login-action@v3.3.0 - uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
with: with:
registry: ghcr.io registry: ghcr.io
username: ${{ github.actor }} username: ${{ github.actor }}

View File

@@ -21,9 +21,9 @@ jobs:
(github.event_name != 'pull_request_review' || startsWith(github.event.pull_request.base.ref, 'release/')) && (github.event_name != 'pull_request_review' || startsWith(github.event.pull_request.base.ref, 'release/')) &&
!contains(github.event.pull_request.labels.*.name, 'community') !contains(github.event.pull_request.labels.*.name, 'community')
steps: steps:
- uses: actions/checkout@v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- uses: actions/setup-node@v4.2.0 - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
with: with:
node-version: 20.x node-version: 20.x
@@ -35,13 +35,13 @@ jobs:
- run: pnpm install --frozen-lockfile - run: pnpm install --frozen-lockfile
- name: Setup build cache - name: Setup build cache
uses: rharkor/caching-for-turbo@v1.5 uses: rharkor/caching-for-turbo@439abec0d28d21b192fa8817b744ffdf1ee5ac0d # v1.5
- name: Build Backend - name: Build Backend
run: pnpm build:backend run: pnpm build:backend
- name: Cache build artifacts - name: Cache build artifacts
uses: actions/cache/save@v4.2.0 uses: actions/cache/save@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
with: with:
path: ./packages/**/dist path: ./packages/**/dist
key: ${{ github.sha }}:workflow-tests key: ${{ github.sha }}:workflow-tests
@@ -52,9 +52,9 @@ jobs:
needs: build needs: build
timeout-minutes: 10 timeout-minutes: 10
steps: steps:
- uses: actions/checkout@v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- uses: actions/setup-node@v4.2.0 - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
with: with:
node-version: 20.x node-version: 20.x
@@ -66,10 +66,10 @@ jobs:
- run: pnpm install --frozen-lockfile - run: pnpm install --frozen-lockfile
- name: Setup build cache - name: Setup build cache
uses: rharkor/caching-for-turbo@v1.5 uses: rharkor/caching-for-turbo@439abec0d28d21b192fa8817b744ffdf1ee5ac0d # v1.5
- name: Restore cached build artifacts - name: Restore cached build artifacts
uses: actions/cache/restore@v4.2.0 uses: actions/cache/restore@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
with: with:
path: ./packages/**/dist path: ./packages/**/dist
key: ${{ github.sha }}:workflow-tests key: ${{ github.sha }}:workflow-tests
@@ -82,7 +82,7 @@ jobs:
DEBIAN_FRONTEND="noninteractive" sudo apt-get install -y graphicsmagick DEBIAN_FRONTEND="noninteractive" sudo apt-get install -y graphicsmagick
- name: Checkout workflows repo - name: Checkout workflows repo
uses: actions/checkout@v4.1.1 uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with: with:
repository: n8n-io/test-workflows repository: n8n-io/test-workflows
path: test-workflows path: test-workflows
@@ -113,7 +113,7 @@ jobs:
N8N_SENTRY_DSN: ${{secrets.CI_SENTRY_DSN}} N8N_SENTRY_DSN: ${{secrets.CI_SENTRY_DSN}}
- name: Notify Slack on failure - name: Notify Slack on failure
uses: act10ns/slack@v2.0.0 uses: act10ns/slack@ed1309ab9862e57e9e583e51c7889486b9a00b0f # v2.0.0
if: failure() && github.ref == 'refs/heads/master' if: failure() && github.ref == 'refs/heads/master'
with: with:
status: ${{ job.status }} status: ${{ job.status }}