@@ -36,21 +36,21 @@ jobs:
3636 name : Pixi lock
3737 runs-on : ubuntu-latest
3838 steps :
39- - uses : holoviz-dev/holoviz_tasks/pixi-lock@ffddda04b2894fea39b407f64d3622d2f19e5a9f # v1
39+ - uses : holoviz-dev/holoviz_tasks/pixi-lock@11eb638302f76ec64217e2eeddfb11df1f788b54 # v1.0.2
4040
4141 conda_build :
4242 name : Build Conda
4343 needs : [pixi_lock]
4444 runs-on : " ubuntu-latest"
4545 steps :
46- - uses : holoviz-dev/holoviz_tasks/pixi-install@ffddda04b2894fea39b407f64d3622d2f19e5a9f # v1
46+ - uses : holoviz-dev/holoviz_tasks/pixi-install@11eb638302f76ec64217e2eeddfb11df1f788b54 # v1.0.2
4747 with :
4848 environments : " build"
4949 install : false
5050 download-data : false
5151 - name : conda build
5252 run : pixi run -e build build-conda
53- - uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
53+ - uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
5454 if : always()
5555 with :
5656 name : artifacts-conda
@@ -65,36 +65,30 @@ jobs:
6565 needs : [conda_build, waiting_room]
6666 if : github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
6767 steps :
68- - uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
68+ - uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
6969 with :
7070 name : artifacts-conda
7171 path : dist/
72- - name : anaconda setup
73- run : |
74- pipx install anaconda-client
75- binstar --version || binstar --help # version broke with typer 0.26.0 and click 8.4.0
76- - name : anaconda dev upload
77- if : contains(github.ref_name, 'a') || contains(github.ref_name, 'b') || contains(github.ref_name, 'rc')
78- run : |
79- binstar --token ${{ secrets.CONDA_UPLOAD_TOKEN }} upload --user pyviz --label=dev dist/*.conda
80- - name : anaconda upload
81- if : (!(contains(github.ref_name, 'a') || contains(github.ref_name, 'b') || contains(github.ref_name, 'rc')))
82- run : |
83- binstar --token ${{ secrets.CONDA_UPLOAD_TOKEN }} upload --user pyviz --label=dev --label=main dist/*.conda
72+ - uses : anaconda/actions/upload-package@a6f488910b4a1e4f3fe01736241ca1b92b4b355a # v0.3.1
73+ with :
74+ token : ${{ secrets.CONDA_UPLOAD_TOKEN }}
75+ channel : pyviz
76+ packages : dist/*.conda
77+ labels : ${{ (contains(github.ref_name, 'a') || contains(github.ref_name, 'b') || contains(github.ref_name, 'rc')) && 'dev' || 'main,dev' }}
8478
8579 pip_build :
8680 name : Build PyPI
8781 needs : [pixi_lock]
8882 runs-on : " ubuntu-latest"
8983 steps :
90- - uses : holoviz-dev/holoviz_tasks/pixi-install@ffddda04b2894fea39b407f64d3622d2f19e5a9f # v1
84+ - uses : holoviz-dev/holoviz_tasks/pixi-install@11eb638302f76ec64217e2eeddfb11df1f788b54 # v1.0.2
9185 with :
9286 environments : " build"
9387 install : false
9488 download-data : false
9589 - name : Build package
9690 run : pixi run -e build build-pip
97- - uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
91+ - uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
9892 if : always()
9993 with :
10094 name : artifacts-pip
@@ -110,10 +104,10 @@ jobs:
110104 runs-on : " ubuntu-latest"
111105 needs : [pip_build]
112106 steps :
113- - uses : actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
107+ - uses : actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
114108 with :
115109 python-version : ${{ env.PYTHON_VERSION }}
116- - uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
110+ - uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
117111 with :
118112 name : artifacts-pip
119113 path : dist/
@@ -130,19 +124,19 @@ jobs:
130124 permissions :
131125 id-token : write
132126 steps :
133- - uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
127+ - uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
134128 with :
135129 name : artifacts-pip
136130 path : dist/
137131 - name : Publish to PyPI
138- uses : pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1
132+ uses : pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
139133
140134 npm_build :
141135 name : Build NPM
142136 needs : [pixi_lock]
143137 runs-on : " ubuntu-latest"
144138 steps :
145- - uses : holoviz-dev/holoviz_tasks/pixi-install@ffddda04b2894fea39b407f64d3622d2f19e5a9f # v1
139+ - uses : holoviz-dev/holoviz_tasks/pixi-install@11eb638302f76ec64217e2eeddfb11df1f788b54 # v1.0.2
146140 with :
147141 environments : " build"
148142 download-data : false
@@ -155,7 +149,7 @@ jobs:
155149 cd $PACKAGE
156150 npm publish --dry-run $TARBALL
157151 cd ..
158- - uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
152+ - uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
159153 if : always()
160154 with :
161155 name : artifacts-npm
@@ -173,10 +167,10 @@ jobs:
173167 id-token : write
174168 contents : read
175169 steps :
176- - uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
170+ - uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
177171 with :
178172 name : artifacts-npm
179- - uses : actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
173+ - uses : actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
180174 with :
181175 node-version : ${{ env.NODE_VERSION }}
182176 registry-url : " https://registry.npmjs.org"
@@ -195,7 +189,7 @@ jobs:
195189 needs : [pixi_lock]
196190 runs-on : " ubuntu-latest"
197191 steps :
198- - uses : holoviz-dev/holoviz_tasks/pixi-install@ffddda04b2894fea39b407f64d3622d2f19e5a9f # v1
192+ - uses : holoviz-dev/holoviz_tasks/pixi-install@11eb638302f76ec64217e2eeddfb11df1f788b54 # v1.0.2
199193 with :
200194 environments : " build"
201195 install : false
@@ -206,7 +200,7 @@ jobs:
206200 - name : build CDN
207201 run : |
208202 pixi run build-pip
209- - uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
203+ - uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
210204 if : always()
211205 with :
212206 name : cdn
@@ -221,11 +215,11 @@ jobs:
221215 needs : [cdn_build, waiting_room]
222216 if : github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
223217 steps :
224- - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
218+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
225219 with :
226220 fetch-depth : " 1"
227221 persist-credentials : false
228- - uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
222+ - uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
229223 with :
230224 name : cdn
231225 path : panel/
@@ -246,10 +240,10 @@ jobs:
246240 env :
247241 TAG : ${{ github.ref_name }}
248242 steps :
249- - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
243+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
250244 with :
251245 persist-credentials : false
252- - uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
246+ - uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
253247 with :
254248 pattern : artifacts-*
255249 path : artifacts/
0 commit comments