ci: pin versions

Author: Ernest

.github/workflows/ci.yml

@@ -7,13 +7,18 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.6.0
 
       - name: Use Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v3.8.2
         with:
           node-version-file: .nvmrc
 
+      - name: Use PNPM
+        uses: pnpm/action-setup@v2.4.0
+        with:
+          version: 7
+
       - run: pnpm install
 
       - run: pnpm run lint
@@ -22,13 +27,18 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.6.0
 
       - name: Use Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v3.8.2
         with:
           node-version-file: .nvmrc
 
+      - name: Use PNPM
+        uses: pnpm/action-setup@v2.4.0
+        with:
+          version: 7
+
       - run: pnpm install
 
       - run: pnpm run build
@@ -44,7 +54,7 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: JS-DevTools/npm-publish@v2
+      - uses: JS-DevTools/npm-publish@v2.2.2
         id: publish
         if: ${{ github.ref == 'refs/heads/main' }}
         with:
@@ -57,16 +67,15 @@ jobs:
 
       - name: Tag
         if: github.ref_name == 'main' && steps.publish.outputs.type
-        uses: anothrNick/github-tag-action@v1
+        uses: anothrNick/github-tag-action@v1.67.0
         env:
           CUSTOM_TAG: ${{ steps.publish.outputs.version }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Release
         if: github.ref_name == 'main' && steps.publish.outputs.type
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2.0.4
         with:
           tag_name: ${{ steps.publish.outputs.version }}
           body:
-            'Changelog: https://github.com/iendeavor/vue-next-select/blob/${{ steps.publish.outputs.version
-            }}/CHANGELOG.md'
+            'Changelog: https://github.com/iendeavor/vue-next-select/blob/${{ steps.publish.outputs.version }}/CHANGELOG.md'

.github/workflows/docs.yml

@@ -9,13 +9,18 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.6.0
 
       - name: Use Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v3.8.2
         with:
           node-version-file: .nvmrc
 
+      - name: Use PNPM
+        uses: pnpm/action-setup@v2.4.0
+        with:
+          version: 7
+
       - name: Setup user
         run: |
           git config --global user.email actions@users.noreply.github.com
@@ -32,7 +37,7 @@ jobs:
           git commit -m 'deploy'
 
       - name: Deploy docs
-        uses: ad-m/github-push-action@master
+        uses: ad-m/github-push-action@v0.8.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           branch: 'docs'

.github/workflows/examples.yml

@@ -9,15 +9,20 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.6.0
         with:
           ref: main
 
       - name: Use Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v3.8.2
         with:
           node-version-file: .nvmrc
 
+      - name: Use PNPM
+        uses: pnpm/action-setup@v2.4.0
+        with:
+          version: 7
+
       - name: Setup user
         run: |
           git config --global user.email actions@users.noreply.github.com
@@ -33,7 +38,7 @@ jobs:
           cd ..
 
       - name: Push
-        uses: ad-m/github-push-action@master
+        uses: ad-m/github-push-action@v0.8.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           branch: 'main'

.github/workflows/release.yml

@@ -9,13 +9,18 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.6.0
 
       - name: Use Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v3.8.2
         with:
           node-version-file: .nvmrc
 
+      - name: Use PNPM
+        uses: pnpm/action-setup@v2.4.0
+        with:
+          version: 7
+
       - name: Install
         run: pnpm install
 
@@ -35,7 +40,7 @@ jobs:
           pnpm run release
 
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v5
+        uses: peter-evans/create-pull-request@v5.0.2
         with:
           delete-branch: true
           reviewers: 'iendeavor'