Merge pull request #8 from PumasAI/dpa/pin-github-actions-to-commit-h…

…ashes CI: Pin all GitHub Actions to full-length commit hashes
PumasAI · Aug 2, 2024 · 96470ac · 96470ac
2 parents a18eabd + a69ee72
commit 96470ac
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -4,7 +4,7 @@ updates:
     directory: "/"
     schedule:
       interval: "monthly"
-    open-pull-requests-limit: 100
+    open-pull-requests-limit: 99
     labels:
       - "dependencies"
       - "github-actions"
diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
@@ -45,14 +45,14 @@ jobs:
           - macos-latest
 
     steps:
-      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
         with:
           persist-credentials: false
 
-      - uses: julia-actions/setup-julia@f2258781c657ad9b4b88072c5eeaf9ec8c370874
+      - uses: julia-actions/setup-julia@f2258781c657ad9b4b88072c5eeaf9ec8c370874 # v2.0.0
         with:
           version: ${{ matrix.version }}
 
-      - uses: julia-actions/julia-buildpkg@90dd6f23eb49626e4e6612cb9d64d456f86e6a1c
+      - uses: julia-actions/julia-buildpkg@90dd6f23eb49626e4e6612cb9d64d456f86e6a1c # v1.6.0
 
-      - uses: julia-actions/julia-runtest@d0c4f093badade621cd041bba567d1e832480ac2
+      - uses: julia-actions/julia-runtest@d0c4f093badade621cd041bba567d1e832480ac2 # v1.10.0