From d0134c84e839b3c0dfccdabc0f5ae224944a7a59 Mon Sep 17 00:00:00 2001 From: saibotk Date: Mon, 22 Sep 2025 15:24:42 +0200 Subject: [PATCH] chore: pin cache action (#290) This pins the cache action in the composite action code. Pins to https://github.com/actions/setup-node/releases/tag/v4.4.0 This allows people to enforce the new GitHub policy to only use pinned GitHub Actions. (This requirement is transitive) --- action.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/action.yml b/action.yml index 573331e..94b93e3 100644 --- a/action.yml +++ b/action.yml @@ -172,7 +172,7 @@ runs: - name: Setup node if: runner.os == 'macOS' || runner.os == 'Windows' - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: # setup-node doesn't allow absolute paths, so we can't # just use `github.action_path` to read this out from the `package.json` @@ -217,7 +217,7 @@ runs: # Restore the original Node version - name: Restore original Node version if: (runner.os == 'macOS' || runner.os == 'Windows') && steps.node_version.outputs.NODE_VERSION != '' - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: ${{ steps.node_version.outputs.NODE_VERSION }}