From 1f18dcc108ecab799bdb5c3580a7b8b27dc037ec Mon Sep 17 00:00:00 2001 From: Kevin van Zonneveld Date: Mon, 8 Jun 2026 19:52:29 +0200 Subject: [PATCH 1/2] Pin third-party GitHub Actions to SHAs --- .github/workflows/ci.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 04efa4a..182d9f5 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -25,7 +25,7 @@ jobs: with: node-version: 20 - run: npm install -g tsx - - uses: ruby/setup-ruby@v1 + - uses: ruby/setup-ruby@afeafc3d1ab54a631816aba4c914a0081c12ff2f with: ruby-version: ${{ matrix.ruby }} bundler-cache: true @@ -37,7 +37,7 @@ jobs: run: bundle exec rake test - name: Upload coverage to Codecov if: matrix.ruby == '3.3' - uses: codecov/codecov-action@v5 + uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe with: token: ${{ secrets.CODECOV_TOKEN }} files: ./coverage/coverage.json @@ -55,7 +55,7 @@ jobs: - uses: actions/checkout@v4 with: lfs: true - - uses: ruby/setup-ruby@v1 + - uses: ruby/setup-ruby@afeafc3d1ab54a631816aba4c914a0081c12ff2f with: ruby-version: 3.3 bundler-cache: true From 30d9eb8ccf56288688ef4f70cb14c7687c3fdb23 Mon Sep 17 00:00:00 2001 From: Kevin van Zonneveld Date: Mon, 8 Jun 2026 19:58:08 +0200 Subject: [PATCH 2/2] Update Codecov action to v6 --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 182d9f5..033769a 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -37,7 +37,7 @@ jobs: run: bundle exec rake test - name: Upload coverage to Codecov if: matrix.ruby == '3.3' - uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe + uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f with: token: ${{ secrets.CODECOV_TOKEN }} files: ./coverage/coverage.json