From bcd42514313173d6d873ca82e093153463b96d38 Mon Sep 17 00:00:00 2001 From: Ry Jones Date: Fri, 24 Jul 2026 10:09:39 -0700 Subject: [PATCH] Pin GitHub Actions to commit SHAs Update actions/checkout v4 -> v7.0.1 and astral-sh/setup-uv v5 -> v9.0.0, pinning both to full commit SHAs with a version comment. Co-Authored-By: Claude Opus 4.8 (1M context) Signed-off-by: Ry Jones --- .github/workflows/python_detailed.yml | 4 ++-- .github/workflows/python_simplified.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/python_detailed.yml b/.github/workflows/python_detailed.yml index 7a9e3ea..647a1bf 100644 --- a/.github/workflows/python_detailed.yml +++ b/.github/workflows/python_detailed.yml @@ -31,10 +31,10 @@ jobs: runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install uv - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: version: "latest" enable-cache: true diff --git a/.github/workflows/python_simplified.yml b/.github/workflows/python_simplified.yml index d723322..cd5548c 100644 --- a/.github/workflows/python_simplified.yml +++ b/.github/workflows/python_simplified.yml @@ -28,10 +28,10 @@ jobs: UV_PYTHON: ${{ matrix.python-version }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install uv - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: version: "latest" enable-cache: true