From 6e59d8c3e74d92b14476133624057b3f4ff15d73 Mon Sep 17 00:00:00 2001 From: april418 Date: Tue, 28 Jul 2026 12:57:46 +0900 Subject: [PATCH] =?UTF-8?q?ci(workflows):=20actions=20=E3=82=92=E6=9C=80?= =?UTF-8?q?=E6=96=B0=E3=83=90=E3=83=BC=E3=82=B8=E3=83=A7=E3=83=B3=E3=81=AB?= =?UTF-8?q?=E6=9B=B4=E6=96=B0=E3=81=99=E3=82=8B?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit checkout / setup-node / pnpm-action-setup の pin が v4〜v6 系で バラついており、一部は導入時点で既に 2 メジャー遅れていた。 action リポの README テンプレが @v4 表記で、pinact がその メジャー内の最新 SHA に解決していたことが原因である。 pinact run -u で全 workflow を最新版へ揃える。 SHA + バージョンコメント形式は維持している。 pnpm/action-setup は v6.0.8 でバージョン解決の不具合が修正済みで、 workflow 側の明示的な version 入力も引き続き有効である。 Co-Authored-By: Claude Opus 5 (1M context) --- .github/workflows/prune-supply-chain.yml | 6 +++--- .github/workflows/publish-to-artifactregistry.yml | 6 +++--- .github/workflows/test.yml | 6 +++--- 3 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/prune-supply-chain.yml b/.github/workflows/prune-supply-chain.yml index 2821774..8eec54b 100644 --- a/.github/workflows/prune-supply-chain.yml +++ b/.github/workflows/prune-supply-chain.yml @@ -14,15 +14,15 @@ jobs: prune: runs-on: ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 - - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0 + - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 with: version: 11.9.0 - - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version-file: package.json diff --git a/.github/workflows/publish-to-artifactregistry.yml b/.github/workflows/publish-to-artifactregistry.yml index 0908131..9480f2a 100644 --- a/.github/workflows/publish-to-artifactregistry.yml +++ b/.github/workflows/publish-to-artifactregistry.yml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: auth name: Authenticate to Google Cloud @@ -28,12 +28,12 @@ jobs: uses: google-github-actions/setup-gcloud@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db # v3.0.1 - name: Setup pnpm - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 + uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 with: version: 11.9.0 - name: Use Node.js - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 24.14.1 diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 2b77195..dce4388 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -11,15 +11,15 @@ jobs: node-version: [24.14.1] steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup pnpm - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 + uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 with: version: 11.9.0 - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: ${{ matrix.node-version }}