Skip to content

Commit 8ef4940

Browse files
authored
ci: Update github action versions (#8711)
1 parent db8dc5e commit 8ef4940

10 files changed

Lines changed: 58 additions & 64 deletions

File tree

.github/workflows/build.yaml

Lines changed: 26 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -36,21 +36,21 @@ jobs:
3636
name: Pixi lock
3737
runs-on: ubuntu-latest
3838
steps:
39-
- uses: holoviz-dev/holoviz_tasks/pixi-lock@ffddda04b2894fea39b407f64d3622d2f19e5a9f # v1
39+
- uses: holoviz-dev/holoviz_tasks/pixi-lock@11eb638302f76ec64217e2eeddfb11df1f788b54 # v1.0.2
4040

4141
conda_build:
4242
name: Build Conda
4343
needs: [pixi_lock]
4444
runs-on: "ubuntu-latest"
4545
steps:
46-
- uses: holoviz-dev/holoviz_tasks/pixi-install@ffddda04b2894fea39b407f64d3622d2f19e5a9f # v1
46+
- uses: holoviz-dev/holoviz_tasks/pixi-install@11eb638302f76ec64217e2eeddfb11df1f788b54 # v1.0.2
4747
with:
4848
environments: "build"
4949
install: false
5050
download-data: false
5151
- name: conda build
5252
run: pixi run -e build build-conda
53-
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
53+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
5454
if: always()
5555
with:
5656
name: artifacts-conda
@@ -65,36 +65,30 @@ jobs:
6565
needs: [conda_build, waiting_room]
6666
if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
6767
steps:
68-
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
68+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
6969
with:
7070
name: artifacts-conda
7171
path: dist/
72-
- name: anaconda setup
73-
run: |
74-
pipx install anaconda-client
75-
binstar --version || binstar --help # version broke with typer 0.26.0 and click 8.4.0
76-
- name: anaconda dev upload
77-
if: contains(github.ref_name, 'a') || contains(github.ref_name, 'b') || contains(github.ref_name, 'rc')
78-
run: |
79-
binstar --token ${{ secrets.CONDA_UPLOAD_TOKEN }} upload --user pyviz --label=dev dist/*.conda
80-
- name: anaconda upload
81-
if: (!(contains(github.ref_name, 'a') || contains(github.ref_name, 'b') || contains(github.ref_name, 'rc')))
82-
run: |
83-
binstar --token ${{ secrets.CONDA_UPLOAD_TOKEN }} upload --user pyviz --label=dev --label=main dist/*.conda
72+
- uses: anaconda/actions/upload-package@a6f488910b4a1e4f3fe01736241ca1b92b4b355a # v0.3.1
73+
with:
74+
token: ${{ secrets.CONDA_UPLOAD_TOKEN }}
75+
channel: pyviz
76+
packages: dist/*.conda
77+
labels: ${{ (contains(github.ref_name, 'a') || contains(github.ref_name, 'b') || contains(github.ref_name, 'rc')) && 'dev' || 'main,dev' }}
8478

8579
pip_build:
8680
name: Build PyPI
8781
needs: [pixi_lock]
8882
runs-on: "ubuntu-latest"
8983
steps:
90-
- uses: holoviz-dev/holoviz_tasks/pixi-install@ffddda04b2894fea39b407f64d3622d2f19e5a9f # v1
84+
- uses: holoviz-dev/holoviz_tasks/pixi-install@11eb638302f76ec64217e2eeddfb11df1f788b54 # v1.0.2
9185
with:
9286
environments: "build"
9387
install: false
9488
download-data: false
9589
- name: Build package
9690
run: pixi run -e build build-pip
97-
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
91+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
9892
if: always()
9993
with:
10094
name: artifacts-pip
@@ -110,10 +104,10 @@ jobs:
110104
runs-on: "ubuntu-latest"
111105
needs: [pip_build]
112106
steps:
113-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
107+
- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
114108
with:
115109
python-version: ${{ env.PYTHON_VERSION }}
116-
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
110+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
117111
with:
118112
name: artifacts-pip
119113
path: dist/
@@ -130,19 +124,19 @@ jobs:
130124
permissions:
131125
id-token: write
132126
steps:
133-
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
127+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
134128
with:
135129
name: artifacts-pip
136130
path: dist/
137131
- name: Publish to PyPI
138-
uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1
132+
uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
139133

140134
npm_build:
141135
name: Build NPM
142136
needs: [pixi_lock]
143137
runs-on: "ubuntu-latest"
144138
steps:
145-
- uses: holoviz-dev/holoviz_tasks/pixi-install@ffddda04b2894fea39b407f64d3622d2f19e5a9f # v1
139+
- uses: holoviz-dev/holoviz_tasks/pixi-install@11eb638302f76ec64217e2eeddfb11df1f788b54 # v1.0.2
146140
with:
147141
environments: "build"
148142
download-data: false
@@ -155,7 +149,7 @@ jobs:
155149
cd $PACKAGE
156150
npm publish --dry-run $TARBALL
157151
cd ..
158-
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
152+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
159153
if: always()
160154
with:
161155
name: artifacts-npm
@@ -173,10 +167,10 @@ jobs:
173167
id-token: write
174168
contents: read
175169
steps:
176-
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
170+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
177171
with:
178172
name: artifacts-npm
179-
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
173+
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
180174
with:
181175
node-version: ${{ env.NODE_VERSION }}
182176
registry-url: "https://registry.npmjs.org"
@@ -195,7 +189,7 @@ jobs:
195189
needs: [pixi_lock]
196190
runs-on: "ubuntu-latest"
197191
steps:
198-
- uses: holoviz-dev/holoviz_tasks/pixi-install@ffddda04b2894fea39b407f64d3622d2f19e5a9f # v1
192+
- uses: holoviz-dev/holoviz_tasks/pixi-install@11eb638302f76ec64217e2eeddfb11df1f788b54 # v1.0.2
199193
with:
200194
environments: "build"
201195
install: false
@@ -206,7 +200,7 @@ jobs:
206200
- name: build CDN
207201
run: |
208202
pixi run build-pip
209-
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
203+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
210204
if: always()
211205
with:
212206
name: cdn
@@ -221,11 +215,11 @@ jobs:
221215
needs: [cdn_build, waiting_room]
222216
if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
223217
steps:
224-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
218+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
225219
with:
226220
fetch-depth: "1"
227221
persist-credentials: false
228-
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
222+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
229223
with:
230224
name: cdn
231225
path: panel/
@@ -246,10 +240,10 @@ jobs:
246240
env:
247241
TAG: ${{ github.ref_name }}
248242
steps:
249-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
243+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
250244
with:
251245
persist-credentials: false
252-
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
246+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
253247
with:
254248
pattern: artifacts-*
255249
path: artifacts/

.github/workflows/docs.yaml

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -39,21 +39,21 @@ jobs:
3939
name: Pixi lock
4040
runs-on: ubuntu-latest
4141
steps:
42-
- uses: holoviz-dev/holoviz_tasks/pixi-lock@ffddda04b2894fea39b407f64d3622d2f19e5a9f # v1
42+
- uses: holoviz-dev/holoviz_tasks/pixi-lock@11eb638302f76ec64217e2eeddfb11df1f788b54 # v1.0.2
4343

4444
docs_build:
4545
name: Build Documentation
4646
needs: [pixi_lock]
4747
runs-on: "macos-latest"
4848
timeout-minutes: 180
4949
steps:
50-
- uses: holoviz-dev/holoviz_tasks/pixi-install@ffddda04b2894fea39b407f64d3622d2f19e5a9f # v1
50+
- uses: holoviz-dev/holoviz_tasks/pixi-install@11eb638302f76ec64217e2eeddfb11df1f788b54 # v1.0.2
5151
with:
5252
environments: docs
5353
opengl: true
5454
- name: Build documentation
5555
run: pixi run -e docs docs-build
56-
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
56+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
5757
if: always()
5858
with:
5959
name: docs
@@ -67,12 +67,12 @@ jobs:
6767
contents: write
6868
needs: [docs_build]
6969
steps:
70-
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
70+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
7171
with:
7272
name: docs
7373
path: builtdocs/
7474
- name: Deploy dev
75-
uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4
75+
uses: peaceiris/actions-gh-pages@84c30a85c19949d7eee79c4ff27748b70285e453 # v4.1.0
7676
if: |
7777
(github.event_name == 'workflow_dispatch' && github.event.inputs.target == 'dev') ||
7878
(github.event_name == 'push' && (contains(github.ref_name, 'a') || contains(github.ref_name, 'b') || contains(github.ref_name, 'rc')))
@@ -82,7 +82,7 @@ jobs:
8282
publish_dir: ./builtdocs
8383
force_orphan: true
8484
- name: Deploy main
85-
uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4
85+
uses: peaceiris/actions-gh-pages@84c30a85c19949d7eee79c4ff27748b70285e453 # v4.1.0
8686
if: |
8787
(github.event_name == 'workflow_dispatch' && github.event.inputs.target == 'main') ||
8888
(github.event_name == 'push' && !(contains(github.ref_name, 'a') || contains(github.ref_name, 'b') || contains(github.ref_name, 'rc')))

.github/workflows/downstream_tests.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
downstream_repo: [holoviews, lumen]
2323
fail-fast: false
2424
steps:
25-
- uses: holoviz-dev/holoviz_tasks/downstream-tests@ffddda04b2894fea39b407f64d3622d2f19e5a9f # v1
25+
- uses: holoviz-dev/holoviz_tasks/downstream-tests@11eb638302f76ec64217e2eeddfb11df1f788b54 # v1.0.2
2626
with:
2727
downstream_repo: ${{ matrix.downstream_repo }}
2828
github_token: ${{ secrets.ACCESS_TOKEN }}

.github/workflows/gallery.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
shell: bash -el {0}
3333
steps:
3434
- name: Checkout
35-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
35+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
3636
with:
3737
fetch-depth: 0
3838
persist-credentials: false
@@ -43,7 +43,7 @@ jobs:
4343
run: |
4444
echo "Deploying from ref $HEAD_BRANCH"
4545
echo "tag=$HEAD_BRANCH" >> $GITHUB_OUTPUT
46-
- uses: conda-incubator/setup-miniconda@8ee1f361103df19b6f8c8655fd3967a8ecb162d5 # v4
46+
- uses: conda-incubator/setup-miniconda@8ee1f361103df19b6f8c8655fd3967a8ecb162d5 # v4.0.1
4747
with:
4848
miniconda-version: "latest"
4949
auto-update-conda: true

.github/workflows/jupyterlite.yaml

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -32,21 +32,21 @@ jobs:
3232
name: Pixi lock
3333
runs-on: ubuntu-latest
3434
steps:
35-
- uses: holoviz-dev/holoviz_tasks/pixi-lock@ffddda04b2894fea39b407f64d3622d2f19e5a9f # v1
35+
- uses: holoviz-dev/holoviz_tasks/pixi-lock@11eb638302f76ec64217e2eeddfb11df1f788b54 # v1.0.2
3636

3737
lite_build:
3838
name: Build Jupyterlite
3939
needs: [pixi_lock]
4040
runs-on: "ubuntu-latest"
4141
steps:
42-
- uses: holoviz-dev/holoviz_tasks/pixi-install@ffddda04b2894fea39b407f64d3622d2f19e5a9f # v1
42+
- uses: holoviz-dev/holoviz_tasks/pixi-install@11eb638302f76ec64217e2eeddfb11df1f788b54 # v1.0.2
4343
with:
4444
environments: "lite"
4545
install: false
4646
download-data: false
4747
- name: lite build
4848
run: pixi run lite-build
49-
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
49+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
5050
if: always()
5151
with:
5252
name: jupyterlite
@@ -58,7 +58,7 @@ jobs:
5858
runs-on: ubuntu-latest
5959
needs: [lite_build]
6060
steps:
61-
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
61+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
6262
with:
6363
name: jupyterlite
6464
path: lite/dist/
@@ -69,7 +69,7 @@ jobs:
6969
if: |
7070
(github.event_name == 'workflow_dispatch' && github.event.inputs.target == 'dev') ||
7171
(github.event_name == 'push' && (contains(steps.vars.outputs.tag, 'a') || contains(steps.vars.outputs.tag, 'b') || contains(steps.vars.outputs.tag, 'rc')))
72-
uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4
72+
uses: peaceiris/actions-gh-pages@84c30a85c19949d7eee79c4ff27748b70285e453 # v4.1.0
7373
with:
7474
personal_token: ${{ secrets.ACCESS_TOKEN }}
7575
external_repository: holoviz-dev/panelite-dev
@@ -79,7 +79,7 @@ jobs:
7979
if: |
8080
(github.event_name == 'workflow_dispatch' && github.event.inputs.target == 'main') ||
8181
(github.event_name == 'push' && !(contains(steps.vars.outputs.tag, 'a') || contains(steps.vars.outputs.tag, 'b') || contains(steps.vars.outputs.tag, 'rc')))
82-
uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4
82+
uses: peaceiris/actions-gh-pages@84c30a85c19949d7eee79c4ff27748b70285e453 # v4.1.0
8383
with:
8484
personal_token: ${{ secrets.ACCESS_TOKEN }}
8585
external_repository: holoviz-dev/panelite

.github/workflows/lock.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
action:
1717
runs-on: ubuntu-latest
1818
steps:
19-
- uses: dessant/lock-threads@89ae32b08ed1a541efecbab17912962a5e38981c # v6
19+
- uses: dessant/lock-threads@89ae32b08ed1a541efecbab17912962a5e38981c # v6.0.2
2020
with:
2121
issue-inactive-days: "100"
2222
pr-inactive-days: "100"

.github/workflows/nightly_lock.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
runs-on: ubuntu-latest
2121
timeout-minutes: 5
2222
steps:
23-
- uses: holoviz-dev/holoviz_tasks/pixi-lock@ffddda04b2894fea39b407f64d3622d2f19e5a9f # v1
23+
- uses: holoviz-dev/holoviz_tasks/pixi-lock@11eb638302f76ec64217e2eeddfb11df1f788b54 # v1.0.2
2424
- name: Upload lock-file to S3
2525
env:
2626
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}

0 commit comments

Comments
 (0)