From e2fd7f005cfa7852bc25ef5d5f51525538b1a364 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 19 Oct 2026 15:21:37 +0000 Subject: [PATCH] Pin dependencies --- .github/workflows/build.yaml | 26 ++++++++++---------- .github/workflows/e2e.yaml | 36 ++++++++++++++-------------- .github/workflows/lint-and-test.yaml | 32 ++++++++++++------------- .github/workflows/release.yaml | 4 ++-- .github/workflows/sbom.yaml | 4 ++-- 5 files changed, 51 insertions(+), 51 deletions(-) diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index c0034452..d3079195 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -22,12 +22,12 @@ jobs: working-directory: ./client steps: - name: Checkout main repo - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: submodules: "recursive" - name: Setup flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: stable flutter-version: 3.47.2 @@ -88,18 +88,18 @@ jobs: run: working-directory: ./client steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: submodules: "recursive" - name: Set up Java - uses: actions/setup-java@v3 + uses: actions/setup-java@e9fbacdec3bb3b6036605a3e6f7995d66773a8c6 # v3 with: distribution: "temurin" java-version: "17" - name: Setup flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: stable flutter-version: 3.47.2 @@ -118,7 +118,7 @@ jobs: - name: Sign AAB id: sign_aab - uses: r0adkll/sign-android-release@v1 + uses: r0adkll/sign-android-release@349ebdef58775b1e0d8099458af0816dc79b6407 # v1 with: releaseDirectory: client/build/app/outputs/bundle/release signingKeyBase64: "${{ secrets.ANDROID_SIGNING_KEY_BASE64 }}" @@ -127,7 +127,7 @@ jobs: keyPassword: "${{ secrets.ANDROID_KEYSTORE_PASSWORD }}" - name: Publish to Play Store - uses: r0adkll/upload-google-play@v1 + uses: r0adkll/upload-google-play@e738b9dd8f2476ea806d921b64aacd24f34515a5 # v1 # Mobile applications are published to the Play Store manually, with release tags applied # post-publication. To avoid redundant uploads, this step executes only for non-tagged # builds, ensuring tagged releases are distributed exclusively to GitHub. @@ -142,7 +142,7 @@ jobs: run: cp "$GITHUB_WORKSPACE/${{ steps.sign_aab.outputs.signedReleaseFile }}" Defguard.aab - name: Upload Android Artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 if: startsWith(github.ref, 'refs/tags/') with: name: android-app @@ -158,18 +158,18 @@ jobs: run: working-directory: ./client steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: submodules: "recursive" - name: Set up Java - uses: actions/setup-java@v3 + uses: actions/setup-java@e9fbacdec3bb3b6036605a3e6f7995d66773a8c6 # v3 with: distribution: "temurin" java-version: "17" - name: Setup flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: stable flutter-version: 3.47.2 @@ -191,7 +191,7 @@ jobs: - name: Sign APK id: sign_apk - uses: r0adkll/sign-android-release@v1 + uses: r0adkll/sign-android-release@349ebdef58775b1e0d8099458af0816dc79b6407 # v1 with: releaseDirectory: client/build/app/outputs/flutter-apk signingKeyBase64: "${{ secrets.ANDROID_SIGNING_KEY_BASE64 }}" @@ -203,7 +203,7 @@ jobs: run: cp "$GITHUB_WORKSPACE/${{ steps.sign_apk.outputs.signedReleaseFile }}" Defguard.apk - name: Upload Android Artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 if: startsWith(github.ref, 'refs/tags/') || github.ref == 'refs/heads/dev' || github.event_name == 'workflow_dispatch' with: name: android-app-apk diff --git a/.github/workflows/e2e.yaml b/.github/workflows/e2e.yaml index 53407186..9d239c76 100644 --- a/.github/workflows/e2e.yaml +++ b/.github/workflows/e2e.yaml @@ -19,7 +19,7 @@ jobs: queue: max timeout-minutes: 90 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: submodules: recursive @@ -30,24 +30,24 @@ jobs: java-version: "17" - name: Set up Android SDK - uses: android-actions/setup-android@v4 + uses: android-actions/setup-android@be39fa834029ff78f1a44aa3bb0819b8fc2bd8fd # v4 with: packages: tools platform-tools build-tools;36.0.0 platforms;android-37.0 ndk;28.2.13676358 - name: Set up Flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: stable flutter-version: 3.47.2 - - uses: actions/setup-node@v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: "26" - name: Install pnpm - uses: pnpm/action-setup@v6 + uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 with: - version: 11.11 + version: 11.28 run_install: false - name: Get pnpm store directory @@ -58,7 +58,7 @@ jobs: echo "STORE_PATH=$STORE_PATH" >> $GITHUB_ENV - name: Restore pnpm store cache - uses: actions/cache@v6 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6 with: path: ${{ env.STORE_PATH }} key: pnpm-store-mobile-e2e-${{ runner.os }}-${{ hashFiles('e2e/pnpm-lock.yaml') }} @@ -92,7 +92,7 @@ jobs: run: ': > "$HOME/.emulator_console_auth_token"' - name: Run Android E2E on emulator - uses: ReactiveCircus/android-emulator-runner@v2 + uses: ReactiveCircus/android-emulator-runner@a421e43855164a8197daf9d8d40fe71c6996bb0d # v2 env: CORE_URL: ${{ secrets.E2E_CORE_URL }} PROXY_URL: ${{ secrets.E2E_PROXY_URL }} @@ -118,24 +118,24 @@ jobs: queue: max timeout-minutes: 90 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: submodules: recursive - name: Set up Flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: stable flutter-version: 3.47.2 - - uses: actions/setup-node@v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: "26" - name: Install pnpm - uses: pnpm/action-setup@v6 + uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 with: - version: 11.11 + version: 11.28 run_install: false - name: Get pnpm store directory @@ -146,7 +146,7 @@ jobs: echo "STORE_PATH=$STORE_PATH" >> $GITHUB_ENV - name: Restore pnpm store cache - uses: actions/cache@v6 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6 with: path: ${{ env.STORE_PATH }} key: pnpm-store-mobile-e2e-${{ runner.os }}-${{ hashFiles('e2e/pnpm-lock.yaml') }} @@ -198,16 +198,16 @@ jobs: lint-e2e: runs-on: [self-hosted, Linux, X64] steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - - uses: actions/setup-node@v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: "26" - name: Install pnpm - uses: pnpm/action-setup@v6 + uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 with: - version: 11.11 + version: 11.28 run_install: false - name: Install e2e dependencies diff --git a/.github/workflows/lint-and-test.yaml b/.github/workflows/lint-and-test.yaml index 240a3a51..a0cb872b 100644 --- a/.github/workflows/lint-and-test.yaml +++ b/.github/workflows/lint-and-test.yaml @@ -36,7 +36,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: submodules: "recursive" @@ -51,7 +51,7 @@ jobs: scanners: "vuln" - name: setup flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: stable flutter-version: 3.47.2 @@ -76,16 +76,16 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: setup flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: stable flutter-version: 3.47.2 - name: Set up Java - uses: actions/setup-java@v3 + uses: actions/setup-java@e9fbacdec3bb3b6036605a3e6f7995d66773a8c6 # v3 with: distribution: "temurin" java-version: "17" @@ -112,7 +112,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: run swift-format run: xcrun swift-format lint --strict --recursive qr_plugin/ios wireguard_plugin/darwin @@ -127,12 +127,12 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: submodules: "recursive" - name: setup flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: stable flutter-version: 3.47.2 @@ -153,10 +153,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: setup flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: stable flutter-version: 3.47.2 @@ -177,21 +177,21 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Set up Java - uses: actions/setup-java@v3 + uses: actions/setup-java@e9fbacdec3bb3b6036605a3e6f7995d66773a8c6 # v3 with: distribution: "temurin" java-version: "17" - name: Set up Android SDK - uses: android-actions/setup-android@v4 + uses: android-actions/setup-android@be39fa834029ff78f1a44aa3bb0819b8fc2bd8fd # v4 with: packages: platform-tools build-tools;36.0.0 platforms;android-36 platforms;android-37.0 ndk;28.2.13676358 - name: setup flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: stable flutter-version: 3.47.2 @@ -219,12 +219,12 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: submodules: "recursive" - name: setup flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: stable flutter-version: 3.47.2 diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index a8d647f0..7de030ae 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -11,14 +11,14 @@ jobs: steps: - name: Download build artifacts - uses: actions/download-artifact@v5 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 with: path: ./artifacts merge-multiple: true - name: Create GitHub release id: release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2 with: draft: true files: | diff --git a/.github/workflows/sbom.yaml b/.github/workflows/sbom.yaml index 425331a1..4b3e8d1a 100644 --- a/.github/workflows/sbom.yaml +++ b/.github/workflows/sbom.yaml @@ -29,7 +29,7 @@ jobs: echo "VERSION=$VERSION" >> $GITHUB_OUTPUT - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: ref: ${{ steps.vars.outputs.TAG_NAME }} submodules: "recursive" @@ -55,7 +55,7 @@ jobs: scanners: "vuln" - name: Upload SBOMs and advisories - uses: shogo82148/actions-upload-release-asset@v1 + uses: shogo82148/actions-upload-release-asset@9ee13965a8a51926f330b424693f25fcff8f2ef6 # v1 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: