From 14026cc46de12c0596df289f5a42ddb08fd80ca6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Juan=20Antonio=20Fern=C3=A1ndez=20de=20Alba?= Date: Mon, 20 Jul 2026 12:47:11 +0200 Subject: [PATCH 1/3] Pin test workflow actions to SHAs --- .github/workflows/test.yaml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 541a37e..35455dc 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -12,7 +12,7 @@ jobs: test-default-datadog-ci-version: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Check PR has a semver release label if: github.event_name == 'pull_request' run: | @@ -50,7 +50,7 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Upload reports using a glob pattern uses: ./ with: @@ -77,7 +77,7 @@ jobs: # Test backwards compatibility with legacy npm semver syntax version: ["latest", "^5.0.0", "~5.0.0", ">=5.0.0", "5.x"] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Sanitize version for tag id: sanitize run: | @@ -109,7 +109,7 @@ jobs: test-older-datadog-ci-version: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Grab second latest version of @datadog/datadog-ci env: GH_TOKEN: ${{ github.token }} @@ -156,7 +156,7 @@ jobs: test-should-complain-about-missing-api-key: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Upload reports using a glob pattern uses: ./ id: test_step From 6880023adb751e595b7e3c15882dbc7c10afa685 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Juan=20Antonio=20Fern=C3=A1ndez=20de=20Alba?= Date: Mon, 20 Jul 2026 12:53:52 +0200 Subject: [PATCH 2/3] Document pinned checkout version --- .github/workflows/test.yaml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 35455dc..d08aa14 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -12,7 +12,7 @@ jobs: test-default-datadog-ci-version: runs-on: ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Check PR has a semver release label if: github.event_name == 'pull_request' run: | @@ -50,7 +50,7 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Upload reports using a glob pattern uses: ./ with: @@ -77,7 +77,7 @@ jobs: # Test backwards compatibility with legacy npm semver syntax version: ["latest", "^5.0.0", "~5.0.0", ">=5.0.0", "5.x"] steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Sanitize version for tag id: sanitize run: | @@ -109,7 +109,7 @@ jobs: test-older-datadog-ci-version: runs-on: ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Grab second latest version of @datadog/datadog-ci env: GH_TOKEN: ${{ github.token }} @@ -156,7 +156,7 @@ jobs: test-should-complain-about-missing-api-key: runs-on: ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Upload reports using a glob pattern uses: ./ id: test_step From fc71928fd4e992aa8aa0be8ef0abd8f92ba0ce93 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Juan=20Antonio=20Fern=C3=A1ndez=20de=20Alba?= Date: Mon, 20 Jul 2026 13:03:04 +0200 Subject: [PATCH 3/3] Upgrade checkout to v7.0.0 --- .github/workflows/test.yaml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index d08aa14..b2f862d 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -12,7 +12,7 @@ jobs: test-default-datadog-ci-version: runs-on: ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Check PR has a semver release label if: github.event_name == 'pull_request' run: | @@ -50,7 +50,7 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Upload reports using a glob pattern uses: ./ with: @@ -77,7 +77,7 @@ jobs: # Test backwards compatibility with legacy npm semver syntax version: ["latest", "^5.0.0", "~5.0.0", ">=5.0.0", "5.x"] steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Sanitize version for tag id: sanitize run: | @@ -109,7 +109,7 @@ jobs: test-older-datadog-ci-version: runs-on: ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Grab second latest version of @datadog/datadog-ci env: GH_TOKEN: ${{ github.token }} @@ -156,7 +156,7 @@ jobs: test-should-complain-about-missing-api-key: runs-on: ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Upload reports using a glob pattern uses: ./ id: test_step