Skip to content

Lock GitHub Actions dependencies with a workflow lockfile #18

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
MohamedBassem merged 1 commit into from
Oct 28, 2026
Merged

Lock GitHub Actions dependencies with a workflow lockfile #18

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
186 changes: 186 additions & 0 deletions .github/workflows/actions.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,186 @@
# This file is machine-generated by `gh actions-lock`.
# Do not edit by hand; run `gh actions-lock` to update.
# Docs: https://gh.io/actions-lockfile
version: 'v0.0.3'
workflows:
'.github/workflows/ci.yaml':
- 'actions/checkout@v4.4.0'
- 'dtolnay/rust-toolchain@stable'
- 'ruby/setup-ruby@v1.335.0'
- 'swatinem/rust-cache@v2.9.3'
'.github/workflows/docker.yaml':
- 'actions/checkout@v4.4.0'
- 'docker/build-push-action@v3.3.1'
- 'docker/login-action@v2.2.0'
- 'docker/metadata-action@v5.10.0'
- 'docker/setup-buildx-action@v2.10.0'
- 'docker/setup-qemu-action@v2.2.0'
'.github/workflows/integration.yaml':
- 'actions/checkout@v4.4.0'
- 'actions/download-artifact@v4.3.0'
- 'dawidd6/action-download-artifact@v3.1.4'
- 'docker/build-push-action@v6.19.2'
- 'docker/setup-buildx-action@v3.12.0'
- 'docker/setup-docker-action@v4.7.0'
- 'docker/setup-qemu-action@v3.7.0'
- 'restatedev/e2e@v2.2'
'.github/workflows/release.yml':
- 'actions/checkout@v4.4.0'
- 'actions/download-artifact@v4.3.0'
- 'actions/upload-artifact@v4.6.2'
- 'oxidize-rb/actions@v1.5.0'
- 'ruby/setup-ruby@v1.335.0'
- 'rubygems/configure-rubygems-credentials@v1.0.0'
'.github/workflows/verify-lockfile.yml':
- 'actions/checkout@v7.0.1'
dependencies:
'actions/cache@v5':
ref: 'v5'
commit: 'sha1-caa296126883cff596d87d8935842f9db880ef25'
owner_id: 44036562
repo_id: 215566462
'actions/checkout@v4.4.0':
ref: 'v4.4.0'
commit: 'sha1-11d5960a326750d5838078e36cf38b85af677262'
owner_id: 44036562
repo_id: 197814629
'actions/checkout@v7.0.1':
ref: 'v7.0.1'
commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
owner_id: 44036562
repo_id: 197814629
'actions/download-artifact@v4.3.0':
ref: 'v4.3.0'
commit: 'sha1-d3f86a106a0bac45b974a628896c90dbdf5c8093'
owner_id: 44036562
repo_id: 192626254
'actions/github-script@v8':
ref: 'v8'
commit: 'sha1-ed597411d8f924073f98dfc5c65a23a2325f34cd'
owner_id: 44036562
repo_id: 205262760
'actions/setup-java@v4':
ref: 'v4'
commit: 'sha1-cf277c60eb25467037889841efdb72551f06f6c3'
owner_id: 44036562
repo_id: 196057608
'actions/upload-artifact@v4':
ref: 'v4'
commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02'
owner_id: 44036562
repo_id: 192625955
'actions/upload-artifact@v4.6.2':
ref: 'v4.6.2'
commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02'
owner_id: 44036562
repo_id: 192625955
'dawidd6/action-download-artifact@v3.1.4':
ref: 'v3.1.4'
commit: 'sha1-09f2f74827fd3a8607589e5ad7f9398816f540fe'
owner_id: 9713907
repo_id: 239218448
'docker/build-push-action@v3.3.1':
ref: 'v3.3.1'
commit: 'sha1-1104d471370f9806843c095c1db02b5a90c5f8b6'
owner_id: 5429470
repo_id: 241092383
'docker/build-push-action@v6.19.2':
ref: 'v6.19.2'
commit: 'sha1-10e90e3645eae34f1e60eeb005ba3a3d33f178e8'
owner_id: 5429470
repo_id: 241092383
'docker/login-action@v2.2.0':
ref: 'v2.2.0'
commit: 'sha1-465a07811f14bebb1938fbed4728c6a1ff8901fc'
owner_id: 5429470
repo_id: 287743349
'docker/metadata-action@v5.10.0':
ref: 'v5.10.0'
commit: 'sha1-c299e40c65443455700f0fdfc63efafe5b349051'
owner_id: 5429470
repo_id: 306769011
'docker/setup-buildx-action@v2.10.0':
ref: 'v2.10.0'
commit: 'sha1-885d1462b80bc1c1c7f0b00334ad271f09369c55'
owner_id: 5429470
repo_id: 288485773
'docker/setup-buildx-action@v3.12.0':
ref: 'v3.12.0'
commit: 'sha1-8d2750c68a42422c14e847fe6c8ac0403b4cbd6f'
owner_id: 5429470
repo_id: 288485773
'docker/setup-docker-action@v4.7.0':
ref: 'v4.7.0'
commit: 'sha1-e43656e248c0bd0647d3f5c195d116aacf6fcaf4'
owner_id: 5429470
repo_id: 398780917
'docker/setup-qemu-action@v2.2.0':
ref: 'v2.2.0'
commit: 'sha1-2b82ce82d56a2a04d2637cd93a637ae1b359c0a7'
owner_id: 5429470
repo_id: 288487894
'docker/setup-qemu-action@v3.7.0':
ref: 'v3.7.0'
commit: 'sha1-c7c53464625b32c7a7e944ae62b3e17d2b600130'
owner_id: 5429470
repo_id: 288487894
'dtolnay/rust-toolchain@master':
ref: 'master'
commit: 'sha1-683b588c487a69d01f6c6ddf40f036ff682cc2c8'
owner_id: 1940490
repo_id: 260749683
'dtolnay/rust-toolchain@stable':
ref: 'stable'
commit: 'sha1-b725eda525362e7cf34af9a7243cac1e3f01a7ec'
owner_id: 1940490
repo_id: 260749683
'enricomi/publish-unit-test-result-action@v2':
ref: 'v2'
commit: 'sha1-7622c5bf3d112a72ab4fa3951c2aa5723d8ab92d'
owner_id: 44700269
repo_id: 290227969
'oxidize-rb/actions@v1':
ref: 'v1'
commit: 'sha1-ec90b4aa48795518d79be3f5cc478d1d7ccd02a8'
owner_id: 103265923
repo_id: 539672782
'oxidize-rb/actions@v1.5.0':
ref: 'v1.5.0'
commit: 'sha1-ec90b4aa48795518d79be3f5cc478d1d7ccd02a8'
owner_id: 103265923
repo_id: 539672782
uses:
- 'actions/cache@v5'
- 'actions/github-script@v8'
- 'dtolnay/rust-toolchain@master'
- 'oxidize-rb/actions@v1'
- 'ruby/setup-ruby-pkgs@v1'
'restatedev/e2e@v2.2':
ref: 'v2.2'
commit: 'sha1-edd926b59e51af418b95c143220c0a2a62b7fd7b'
owner_id: 97341811
repo_id: 489007488
uses:
- 'actions/setup-java@v4'
- 'actions/upload-artifact@v4'
- 'enricomi/publish-unit-test-result-action@v2'
'ruby/setup-ruby-pkgs@v1':
ref: 'v1'
commit: 'sha1-2233d39c1315c667a2970436418b520a6300124e'
owner_id: 210414
repo_id: 243428768
'ruby/setup-ruby@v1.335.0':
ref: 'v1.335.0'
commit: 'sha1-7f797815d8adceb1c412e7abefdd1ab4abc47a5f'
owner_id: 210414
repo_id: 231208785
'rubygems/configure-rubygems-credentials@v1.0.0':
ref: 'v1.0.0'
commit: 'sha1-bc6dd217f8a4f919d6835fcfefd470ef821f5c44'
owner_id: 208761
repo_id: 631633510
'swatinem/rust-cache@v2.9.3':
ref: 'v2.9.3'
commit: 'sha1-d1527c8f67ef9af357290475d4af4b0fab8f12e0'
owner_id: 580492
repo_id: 298565987
6 changes: 3 additions & 3 deletions .github/workflows/ci.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,10 +12,10 @@ jobs:
name: Build, lint, typecheck & test

steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v4.4.0

- name: Set up Ruby
uses: ruby/setup-ruby@v1
uses: ruby/setup-ruby@v1.335.0
with:
ruby-version: "3.3"
bundler-cache: true
Expand All @@ -24,7 +24,7 @@ jobs:
uses: dtolnay/rust-toolchain@stable

- name: Rust cache
uses: Swatinem/rust-cache@v2
uses: Swatinem/rust-cache@v2.9.3
with:
workspaces: ext/restate_internal

Expand Down
12 changes: 6 additions & 6 deletions .github/workflows/docker.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,24 +18,24 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v4
uses: actions/checkout@v4.4.0

- name: Set up QEMU dependency
uses: docker/setup-qemu-action@v2
uses: docker/setup-qemu-action@v2.2.0

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v2
uses: docker/setup-buildx-action@v2.10.0

- name: Log into GitHub container registry
uses: docker/login-action@v2
uses: docker/login-action@v2.2.0
with:
registry: ${{ env.GHCR_REGISTRY }}
username: ${{ env.GHCR_REGISTRY_USERNAME }}
password: ${{ env.GHCR_REGISTRY_TOKEN }}

- name: Extract metadata (tags, labels)
id: meta
uses: docker/metadata-action@v5
uses: docker/metadata-action@v5.10.0
with:
images: |
ghcr.io/restatedev/test-services-ruby
Expand All @@ -45,7 +45,7 @@ jobs:
type=semver,pattern={{major}}.{{minor}}

- name: Build docker image
uses: docker/build-push-action@v3
uses: docker/build-push-action@v3.3.1
with:
context: .
file: test-services/Dockerfile
Expand Down
14 changes: 7 additions & 7 deletions .github/workflows/integration.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,12 +55,12 @@ jobs:
actions: read

steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v4.4.0
with:
repository: restatedev/sdk-ruby

- name: Set up Docker containerd snapshotter
uses: docker/setup-docker-action@v4
uses: docker/setup-docker-action@v4.7.0
with:
version: "v28.5.2"
set-host: true
Expand All @@ -77,13 +77,13 @@ jobs:
# We must use download-artifact to get artifacts created during *this* workflow run, ie by workflow call
- name: Download restate snapshot from in-progress workflow
if: ${{ inputs.restateCommit != '' && github.event_name != 'workflow_dispatch' }}
uses: actions/download-artifact@v4
uses: actions/download-artifact@v4.3.0
with:
name: restate.tar
# In the workflow dispatch case where the artifact was created in a previous run, we can download as normal
- name: Download restate snapshot from completed workflow
if: ${{ inputs.restateCommit != '' && github.event_name == 'workflow_dispatch' }}
uses: dawidd6/action-download-artifact@v3
uses: dawidd6/action-download-artifact@v3.1.4
with:
repo: restatedev/restate
workflow: ci.yml
Expand All @@ -99,14 +99,14 @@ jobs:
# Either build the docker image from source
- name: Set up QEMU
if: ${{ inputs.serviceImage == '' }}
uses: docker/setup-qemu-action@v3
uses: docker/setup-qemu-action@v3.7.0
- name: Set up Docker Buildx
if: ${{ inputs.serviceImage == '' }}
uses: docker/setup-buildx-action@v3
uses: docker/setup-buildx-action@v3.12.0
- name: Build Ruby test-services image
if: ${{ inputs.serviceImage == '' }}
id: build
uses: docker/build-push-action@v6
uses: docker/build-push-action@v6.19.2
with:
context: .
file: "test-services/Dockerfile"
Expand Down
20 changes: 10 additions & 10 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ jobs:
version-check:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v4.4.0
- name: Verify version matches tag
if: github.ref_type == 'tag'
run: |
Expand All @@ -36,7 +36,7 @@ jobs:
result: ${{ steps.fetch.outputs.result }}
steps:
- id: fetch
uses: oxidize-rb/actions/fetch-ci-data@v1
uses: oxidize-rb/actions/fetch-ci-data@v1.5.0
with:
supported-ruby-platforms: |
exclude:
Expand All @@ -54,9 +54,9 @@ jobs:
matrix:
ruby-platform: ${{ fromJSON(needs.ci-data.outputs.result).supported-ruby-platforms }}
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v4.4.0

- uses: oxidize-rb/actions/setup-ruby-and-rust@v1
- uses: oxidize-rb/actions/setup-ruby-and-rust@v1.5.0
with:
ruby-version: "3.3"
bundler-cache: true
Expand All @@ -67,7 +67,7 @@ jobs:
run: bundle exec rb-sys-dock --platform ${{ matrix.ruby-platform }} --ruby-versions "${{ join(fromJSON(needs.ci-data.outputs.result).stable-ruby-versions, ',') }}" --mount-toolchains --build

- name: Upload gem
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v4.6.2
with:
name: gem-${{ matrix.ruby-platform }}
path: pkg/*-${{ matrix.ruby-platform }}.gem
Expand All @@ -77,17 +77,17 @@ jobs:
runs-on: ubuntu-latest
needs: [version-check]
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v4.4.0

- uses: ruby/setup-ruby@v1
- uses: ruby/setup-ruby@v1.335.0
with:
ruby-version: "3.3"

- name: Build source gem
run: gem build restate-sdk.gemspec

- name: Upload gem
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v4.6.2
with:
name: gem-source
path: "*.gem"
Expand All @@ -103,7 +103,7 @@ jobs:
contents: read
id-token: write
steps:
- uses: actions/download-artifact@v4
- uses: actions/download-artifact@v4.3.0
with:
pattern: gem-*
merge-multiple: true
Expand All @@ -112,7 +112,7 @@ jobs:
- name: List gems
run: ls -la gems/

- uses: ruby/setup-ruby@v1
- uses: ruby/setup-ruby@v1.335.0
with:
ruby-version: "3.3"

Expand Down
Loading
Loading