ci: pin GitHub Actions to commit SHAs (#505)

Supersedes #309 by @SurefireStudios, ported onto the current component layout with fixes from review.

Verified before merge: format, package boundaries, unit suite, build, and the browser tracking suite; a browser harness for the change where one applies; adversarial review applied.

Co-authored-by: SurefireStudios <[email protected]>
This commit is contained in:
Bilawal SidhuandSurefireStudios authored and GitHub committed 2026-09-14 19:29:45 -05:00
1 parent 1c9a55e2f9
commit b00f835341
2 files changed
+8 -4

No files matched your search

+4 -4
View File
@@ -26,12 +26,12 @@ jobs:
GEV_REQUIRE_ALLOCATION_GATE: ${{ matrix.node == '24.14.0' && '1' || '0' }}
steps:
- name: Check out source
uses: actions/checkout@v4
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
with:
persist-credentials: false
- name: Use Node.js
uses: actions/setup-node@v4
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
with:
node-version: ${{ matrix.node }}
cache: npm
@@ -63,12 +63,12 @@ jobs:
GEV_REQUIRE_ALLOCATION_GATE: '0'
steps:
- name: Check out source
uses: actions/checkout@v4
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
with:
persist-credentials: false
- name: Use Node.js
uses: actions/setup-node@v4
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
with:
node-version: 24.14.0
cache: npm