From 9a1d4778fdd9518175e29b977cc1bce0644e5df3 Mon Sep 17 00:00:00 2001 From: Matthew Wraith Date: Thu, 25 Jun 2026 08:41:58 -0700 Subject: [PATCH] CI: Pin GitHub Actions to commit SHAs The bitnomial org now requires all actions to be pinned to a full-length commit SHA, which was failing every CI job at the action-preparation step. Pinned via `pinact run -u`, which also bumps to the latest releases: checkout v7.0.0, haskell-actions/setup v2.11.0, cache v6.0.0. Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/workflows/ci.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f1fd06222..9fae08bbd 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -26,16 +26,16 @@ jobs: - "9.10.1" steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - - uses: haskell-actions/setup@v2 + - uses: haskell-actions/setup@cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553 # v2.11.0 id: setup-haskell-cabal name: Setup Haskell with: ghc-version: ${{ matrix.ghc }} cabal-version: ${{ matrix.cabal }} - - uses: actions/cache@v3 + - uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0 name: Cache cabal-store with: path: ${{ steps.setup-haskell-cabal.outputs.cabal-store }} @@ -68,15 +68,15 @@ jobs: - "--stack-yaml ./stack-9.6.yaml" steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - - uses: haskell-actions/setup@v2 + - uses: haskell-actions/setup@cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553 # v2.11.0 name: Setup Haskell Stack with: stack-version: ${{ matrix.stack }} enable-stack: true - - uses: actions/cache@v3 + - uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0 name: Cache ~/.stack with: path: ~/.stack