From f53352d8c2ae4f7dfe089cca59ac1f96463acc0f Mon Sep 17 00:00:00 2001 From: Mahangu Weerasinghe Date: Mon, 8 Jun 2026 08:49:05 +0530 Subject: [PATCH] chore: pin third-party GitHub Actions to commit SHAs Tracking: DEVPROD-1072 --- .github/workflows/ci.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e6c3232..5418535 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -78,7 +78,7 @@ jobs: fi - name: Set up PHP - uses: shivammathur/setup-php@2.37.1 + uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # 2.37.1 with: coverage: ${{ steps.coverage.outputs.coverage }} php-version: ${{ matrix.config.php }} @@ -91,13 +91,13 @@ jobs: chmod +x /usr/local/bin/phpunit - name: Install PHP Dependencies - uses: ramsey/composer-install@2.2.0 + uses: ramsey/composer-install@83af392bf5f031813d25e6fe4cd626cdba9a2df6 # 2.2.0 - name: Install SVN run: sudo apt-get update && sudo apt-get install -y subversion - name: Set up WordPress and WordPress Test Library - uses: sjinks/setup-wordpress-test-library@1.1.14 + uses: sjinks/setup-wordpress-test-library@598ab5e6993bb1ceea77393f8020e034772719d2 # 1.1.14 with: version: ${{ matrix.config.wp }} @@ -121,7 +121,7 @@ jobs: MEMCACHED_HOST_2: 127.0.0.1:11212 - name: Upload coverage report - uses: codecov/codecov-action@v3 + uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # v3.1.6 with: files: coverage/clover.xml flags: unittests