ci: use lock versions (#485)

alexander-akait · web-flow · commit 22d1cb691414 · 2026-03-16T23:24:41.000+03:00
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -13,13 +13,16 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: lts/*
           cache: npm
+
       - run: npm ci
+
       - run: npm run lint
   test:
     strategy:
@@ -29,8 +32,9 @@ jobs:
         node-version: [10.x, 12.x, 14.x, 16.x, 18.x, 20.x, 22.x, 24.x]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/github-script@v7
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         id: calculate_architecture
         with:
           result-encoding: string
@@ -40,23 +44,28 @@ jobs:
             } else {
               return ''
             }
+
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: ${{ matrix.node-version }}
           architecture: ${{ steps.calculate_architecture.outputs.result }}
           cache: npm
+
       - name: Install dependencies
         run: |
           npm install -D typescript@^4 jest@^27 memfs@^3 --ignore-scripts
           npm install --ignore-scripts
         if: matrix.node-version == '10.x' || matrix.node-version == '12.x' || matrix.node-version == '14.x' || matrix.node-version == '16.x'
+
       - name: Install dependencies
         run: npm ci
         if: matrix.node-version != '10.x' && matrix.node-version != '12.x' && matrix.node-version != '14.x' && matrix.node-version != '16.x'
+
       - name: Run tests with coverage
         run: npm run test:coverage -- --ci
-      - uses: codecov/codecov-action@v5
+
+      - uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
         with:
           flags: integration
           token: ${{ secrets.CODECOV_TOKEN }}
