From 430471a167e497f38015b250df7f7344462d10e5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bern=C3=A1t=20G=C3=A1bor?= Date: Tue, 27 Oct 2026 15:50:46 -0700 Subject: [PATCH] =?UTF-8?q?=F0=9F=91=B7=20ci(release):=20pin=20github-work?= =?UTF-8?q?flows=206.2.1?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/news.yaml | 5 +++-- .github/workflows/prepare-release.yaml | 2 +- .github/workflows/release.yaml | 14 +++++++------- .github/workflows/upgrade-release-tools.yaml | 2 +- 4 files changed, 12 insertions(+), 11 deletions(-) diff --git a/.github/workflows/news.yaml b/.github/workflows/news.yaml index dc7fe090..eeddebee 100644 --- a/.github/workflows/news.yaml +++ b/.github/workflows/news.yaml @@ -7,6 +7,7 @@ concurrency: cancel-in-progress: true permissions: contents: read + pull-requests: read jobs: changelog: name: 📝 News fragment @@ -24,9 +25,9 @@ jobs: python-version: "3.15" enable-cache: false - name: 📦 Install locked release tools - uses: tox-dev/github-workflows/install-locked-tools@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0 + uses: tox-dev/github-workflows/install-locked-tools@57a765127aae73adf7d0e24a7fe0f067f2d3ea3e # 6.2.1 with: groups: release-news venv: ${{ runner.temp }}/release-tools - name: 🔍 Validate news fragments - uses: tox-dev/github-workflows/validate-news@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0 + uses: tox-dev/github-workflows/validate-news@57a765127aae73adf7d0e24a7fe0f067f2d3ea3e # 6.2.1 diff --git a/.github/workflows/prepare-release.yaml b/.github/workflows/prepare-release.yaml index 42282031..bbb78420 100644 --- a/.github/workflows/prepare-release.yaml +++ b/.github/workflows/prepare-release.yaml @@ -12,7 +12,7 @@ permissions: {} jobs: prepare: name: 🏷️ Prepare Towncrier release - uses: tox-dev/github-workflows/.github/workflows/prepare-towncrier-release.yaml@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0 + uses: tox-dev/github-workflows/.github/workflows/prepare-towncrier-release.yaml@57a765127aae73adf7d0e24a7fe0f067f2d3ea3e # 6.2.1 permissions: contents: read pull-requests: read diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index ebf8f9c2..b47fec54 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -31,7 +31,7 @@ jobs: python-version: "3.15" enable-cache: false - name: 🏗️ Build distributions - uses: tox-dev/github-workflows/build-python-distribution@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0 + uses: tox-dev/github-workflows/build-python-distribution@57a765127aae73adf7d0e24a7fe0f067f2d3ea3e # 6.2.1 - name: 📤 Upload distributions uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: @@ -41,7 +41,7 @@ jobs: build: name: 🏗️ Build if: startsWith(github.ref, 'refs/tags/') - uses: tox-dev/github-workflows/.github/workflows/validate-python-release.yaml@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0 + uses: tox-dev/github-workflows/.github/workflows/validate-python-release.yaml@57a765127aae73adf7d0e24a7fe0f067f2d3ea3e # 6.2.1 permissions: contents: read release: @@ -86,7 +86,7 @@ jobs: artifact-ids: ${{ needs.build.outputs.distributions-artifact-id }} path: dist - name: 🔍 Verify PyPI artifacts - uses: tox-dev/github-workflows/reconcile-pypi-artifacts@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0 + uses: tox-dev/github-workflows/reconcile-pypi-artifacts@57a765127aae73adf7d0e24a7fe0f067f2d3ea3e # 6.2.1 with: project: platformdirs version: ${{ github.ref_name }} @@ -112,17 +112,17 @@ jobs: python-version: "3.15" enable-cache: false - name: 📦 Install locked release tools - uses: tox-dev/github-workflows/install-locked-tools@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0 + uses: tox-dev/github-workflows/install-locked-tools@57a765127aae73adf7d0e24a7fe0f067f2d3ea3e # 6.2.1 with: groups: release-notes venv: ${{ runner.temp }}/release-tools - name: 🏷️ Select previous tag id: previous - uses: tox-dev/github-workflows/select-previous-tag@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0 + uses: tox-dev/github-workflows/select-previous-tag@57a765127aae73adf7d0e24a7fe0f067f2d3ea3e # 6.2.1 with: tag: ${{ github.ref_name }} - name: 📝 Render release notes - uses: tox-dev/github-workflows/render-release-notes@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0 + uses: tox-dev/github-workflows/render-release-notes@57a765127aae73adf7d0e24a7fe0f067f2d3ea3e # 6.2.1 with: tag: ${{ github.ref_name }} previous: ${{ steps.previous.outputs.previous }} @@ -148,7 +148,7 @@ jobs: artifact-ids: ${{ needs.notes.outputs.artifact-id }} path: ${{ runner.temp }}/release-notes - name: 🚀 Publish GitHub release - uses: tox-dev/github-workflows/publish-github-release@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0 + uses: tox-dev/github-workflows/publish-github-release@57a765127aae73adf7d0e24a7fe0f067f2d3ea3e # 6.2.1 env: GH_TOKEN: ${{ github.token }} with: diff --git a/.github/workflows/upgrade-release-tools.yaml b/.github/workflows/upgrade-release-tools.yaml index ed834c29..136f017b 100644 --- a/.github/workflows/upgrade-release-tools.yaml +++ b/.github/workflows/upgrade-release-tools.yaml @@ -10,7 +10,7 @@ concurrency: jobs: upgrade: name: 🔀 Upgrade release tools - uses: tox-dev/github-workflows/.github/workflows/upgrade-release-tools.yaml@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0 + uses: tox-dev/github-workflows/.github/workflows/upgrade-release-tools.yaml@57a765127aae73adf7d0e24a7fe0f067f2d3ea3e # 6.2.1 permissions: contents: read secrets: