This is an automated email from the ASF dual-hosted git repository.
sjanc pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/mynewt-core.git
The following commit(s) were added to refs/heads/master by this push:
new bf5383787 ci: Pin external actions to commit hashes
bf5383787 is described below
commit bf5383787fb9d6f0636ab0c74fc5f0cd887e6690
Author: Szymon Janc <[email protected]>
AuthorDate: Fri Oct 23 10:41:31 2026 +0200
ci: Pin external actions to commit hashes
ASF GitHub Actions Policy requires external actions to be pinned to
a specific git hash. Only actions from apache/*, github/* and actions/*
namespaces may use tags, and Infra recommends major version tags for
those, which is already the case.
Pin carlosperate/arm-none-eabi-gcc-action, codelytv/pr-size-labeler
and peter-evans/create-pull-request to commit hashes of currently used
releases, with version in comment. Dependabot updates both hash and
comment.
Assisted-by: Claude:claude-opus-5-5
---
.github/actions/gcc-target-build/action.yml | 2 +-
.github/workflows/build.yml | 14 +++++++-------
.github/workflows/build_bootloader_main.yml | 2 +-
.github/workflows/labeler.yml | 2 +-
.github/workflows/update_hw_ci_badges.yml | 2 +-
5 files changed, 11 insertions(+), 11 deletions(-)
diff --git a/.github/actions/gcc-target-build/action.yml
b/.github/actions/gcc-target-build/action.yml
index cd1e208e6..8a4373093 100644
--- a/.github/actions/gcc-target-build/action.yml
+++ b/.github/actions/gcc-target-build/action.yml
@@ -34,7 +34,7 @@ runs:
steps:
- name: Install toolchain
id: gcc
- uses: carlosperate/[email protected]
+ uses:
carlosperate/arm-none-eabi-gcc-action@0edbb000a5a98e2292b051b463bff6f512547118
# v1.14.0
with:
release: ${{ inputs.release }}
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b1e098d52..47cacc9b9 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -104,7 +104,7 @@ jobs:
timeout-minutes: 60
steps:
- uses: actions/checkout@v7
- - uses: carlosperate/[email protected]
+ - uses:
carlosperate/arm-none-eabi-gcc-action@0edbb000a5a98e2292b051b463bff6f512547118
# v1.14.0
with:
release: '15.2.Rel1'
- name: Install Dependencies
@@ -142,7 +142,7 @@ jobs:
timeout-minutes: 60
steps:
- uses: actions/checkout@v7
- - uses: carlosperate/[email protected]
+ - uses:
carlosperate/arm-none-eabi-gcc-action@0edbb000a5a98e2292b051b463bff6f512547118
# v1.14.0
with:
release: '15.2.Rel1'
- name: Install GNU sed
@@ -173,7 +173,7 @@ jobs:
timeout-minutes: 60
steps:
- uses: actions/checkout@v7
- - uses: carlosperate/[email protected]
+ - uses:
carlosperate/arm-none-eabi-gcc-action@0edbb000a5a98e2292b051b463bff6f512547118
# v1.14.0
with:
release: '15.2.Rel1'
- name: Install Dependencies
@@ -211,7 +211,7 @@ jobs:
timeout-minutes: 60
steps:
- uses: actions/checkout@v7
- - uses: carlosperate/[email protected]
+ - uses:
carlosperate/arm-none-eabi-gcc-action@0edbb000a5a98e2292b051b463bff6f512547118
# v1.14.0
with:
release: '15.2.Rel1'
- name: Install Dependencies
@@ -248,7 +248,7 @@ jobs:
timeout-minutes: 60
steps:
- uses: actions/checkout@v7
- - uses: carlosperate/[email protected]
+ - uses:
carlosperate/arm-none-eabi-gcc-action@0edbb000a5a98e2292b051b463bff6f512547118
# v1.14.0
with:
release: '15.2.Rel1'
- name: Restore project
@@ -291,7 +291,7 @@ jobs:
timeout-minutes: 60
steps:
- uses: actions/checkout@v7
- - uses: carlosperate/[email protected]
+ - uses:
carlosperate/arm-none-eabi-gcc-action@0edbb000a5a98e2292b051b463bff6f512547118
# v1.14.0
with:
release: '15.2.Rel1'
- name: Install GNU sed
@@ -323,7 +323,7 @@ jobs:
timeout-minutes: 60
steps:
- uses: actions/checkout@v7
- - uses: carlosperate/[email protected]
+ - uses:
carlosperate/arm-none-eabi-gcc-action@0edbb000a5a98e2292b051b463bff6f512547118
# v1.14.0
with:
release: 15.2.Rel1
- name: Install Dependencies
diff --git a/.github/workflows/build_bootloader_main.yml
b/.github/workflows/build_bootloader_main.yml
index a781ed722..2670ff1c0 100644
--- a/.github/workflows/build_bootloader_main.yml
+++ b/.github/workflows/build_bootloader_main.yml
@@ -37,7 +37,7 @@ jobs:
timeout-minutes: 60
steps:
- uses: actions/checkout@v7
- - uses: carlosperate/[email protected]
+ - uses:
carlosperate/arm-none-eabi-gcc-action@0edbb000a5a98e2292b051b463bff6f512547118
# v1.14.0
with:
release: '15.2.Rel1'
- name: Install Dependencies
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index 61eb5511e..ec85cfc1e 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -33,7 +33,7 @@ jobs:
timeout-minutes: 60
steps:
- name: Assign labels based on the PR's size
- uses: codelytv/[email protected]
+ uses:
codelytv/pr-size-labeler@19c335e7695ba922de938806dd129f0a9b992644 # v1.12.0
with:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
ignore_file_deletions: true
diff --git a/.github/workflows/update_hw_ci_badges.yml
b/.github/workflows/update_hw_ci_badges.yml
index 14c440b95..72a902b06 100644
--- a/.github/workflows/update_hw_ci_badges.yml
+++ b/.github/workflows/update_hw_ci_badges.yml
@@ -43,7 +43,7 @@ jobs:
run: python .github/scripts/update_badges.py
- name: Create Pull Request
- uses: peter-evans/create-pull-request@v8
+ uses:
peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 #
v8.1.1
with:
author: Mynewt Bot <[email protected]>
token: ${{ secrets.GITHUB_TOKEN }}
