@@ -32,12 +32,13 @@ jobs:
3232 cancel-in-progress : true
3333
3434 steps :
35- - uses : actions/checkout@v5
35+ - name : Checkout Repository
36+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3637 with :
3738 fetch-depth : 0
3839
3940 - name : Use Node.js ${{ matrix.node-version }}
40- uses : actions/setup-node@v4
41+ uses : actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
4142 with :
4243 node-version : ${{ matrix.node-version }}
4344 cache : " npm"
5758 - name : Security audit
5859 run : npm run security
5960
60- - name : Validate PR commits with commitlint
61- if : github.event_name == 'pull_request'
62- run : npx commitlint --from ${{ github.event.pull_request.head.sha }}~${{ github.event.pull_request.commits }} --to ${{ github.event.pull_request.head.sha }} --verbose
63-
6461 test :
6562 name : Test - ${{ matrix.os }} - Node v${{ matrix.node-version }}, Webpack ${{ matrix.webpack-version }}
6663
8279 if : matrix.os == 'windows-latest'
8380 run : git config --global core.autocrlf input
8481
85- - uses : actions/checkout@v5
86- - uses : actions/github-script@v7
82+ - name : Checkout Repository
83+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
84+
85+ - uses : actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
8786 id : calculate_architecture
8887 with :
8988 result-encoding : string
9392 } else {
9493 return ''
9594 }
95+
9696 - name : Use Node.js ${{ matrix.node-version }}
97- uses : actions/setup-node@v4
97+ uses : actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
9898 with :
9999 node-version : ${{ matrix.node-version }}
100100 architecture : ${{ steps.calculate_architecture.outputs.result }}
@@ -126,6 +126,6 @@ jobs:
126126 run : npm run test:coverage -- --ci
127127
128128 - name : Submit coverage data to codecov
129- uses : codecov/codecov-action@v5
129+ uses : codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
130130 with :
131131 token : ${{ secrets.CODECOV_TOKEN }}
0 commit comments