From f897c33f4877aa6431d539960f13a49b81e31baf Mon Sep 17 00:00:00 2001 From: jahn-junior Date: Thu, 8 Oct 2026 16:20:47 -0700 Subject: [PATCH 1/2] ci: update and pin actions --- .github/workflows/check-removed-urls.yml | 8 ++++---- .github/workflows/cla-check.yml | 2 +- .github/workflows/markdown-style-checks.yml | 2 +- .../workflows/sphinx-python-dependency-build-checks.yml | 2 +- .github/workflows/test-sphinx-stack.yml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/check-removed-urls.yml b/.github/workflows/check-removed-urls.yml index f98523f2..e2c6b945 100644 --- a/.github/workflows/check-removed-urls.yml +++ b/.github/workflows/check-removed-urls.yml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout PR branch - uses: actions/checkout@v5 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: # This implicitly gets the PR branch. Making it explicit causes problems # with private forks, but it is equivalent to the following: @@ -19,18 +19,18 @@ jobs: fetch-depth: 0 path: compare - name: Checkout base branch - uses: actions/checkout@v5 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ github.event.pull_request.base.ref }} repository: ${{ github.event.pull_request.base.repo.full_name }} fetch-depth: 0 path: base - name: Checkout sphinx-stack - uses: actions/checkout@v5 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: canonical/sphinx-stack path: sphinx-stack - - uses: actions/setup-python@v6 + - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 - name: Build docs run: | for dir in compare base; do diff --git a/.github/workflows/cla-check.yml b/.github/workflows/cla-check.yml index 7de30760..520667b4 100644 --- a/.github/workflows/cla-check.yml +++ b/.github/workflows/cla-check.yml @@ -14,4 +14,4 @@ jobs: runs-on: ubuntu-latest steps: - name: Check if CLA signed - uses: canonical/has-signed-canonical-cla@v2 + uses: canonical/has-signed-canonical-cla@1c20438ad54b4d37105e777000545881d2293ba4 # v2.2.0 diff --git a/.github/workflows/markdown-style-checks.yml b/.github/workflows/markdown-style-checks.yml index c218164c..2ce7b0e8 100644 --- a/.github/workflows/markdown-style-checks.yml +++ b/.github/workflows/markdown-style-checks.yml @@ -17,7 +17,7 @@ jobs: markdown-lint: runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 - name: Create venv diff --git a/.github/workflows/sphinx-python-dependency-build-checks.yml b/.github/workflows/sphinx-python-dependency-build-checks.yml index 71571e75..f3be4db2 100644 --- a/.github/workflows/sphinx-python-dependency-build-checks.yml +++ b/.github/workflows/sphinx-python-dependency-build-checks.yml @@ -28,7 +28,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install dependencies run: | diff --git a/.github/workflows/test-sphinx-stack.yml b/.github/workflows/test-sphinx-stack.yml index bfbf5036..afa01e30 100644 --- a/.github/workflows/test-sphinx-stack.yml +++ b/.github/workflows/test-sphinx-stack.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out repo - uses: actions/checkout@v5 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 - name: Build docs From 378422b86b810187fb67422e9e102783200991d0 Mon Sep 17 00:00:00 2001 From: jahn-junior Date: Thu, 8 Oct 2026 16:24:26 -0700 Subject: [PATCH 2/2] docs: update changelog --- CHANGELOG.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 51b23a43..a589bd31 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,15 +8,17 @@ * Exclude `_build` dir when linting Markdown * Skip pa11y installation if it is already present * Update `CONTRIBUTING.md` to include versioning and breaking changes policy +* Update and pin CI actions ### Changed * `docs/conf.py` [#610](https://github.com/canonical/sphinx-stack/pull/610) * `docs/Makefile` [#605](https://github.com/canonical/sphinx-stack/pull/605), [#610](https://github.com/canonical/sphinx-stack/pull/610), [#627](https://github.com/canonical/sphinx-stack/pull/627), [#628](https://github.com/canonical/sphinx-stack/pull/628) * `README.md` [#603](https://github.com/canonical/sphinx-stack/pull/603) -* `.github/workflows/cla-check.yml` [#606](https://github.com/canonical/sphinx-stack/pull/606) -* `.github/workflows/check-removed-urls.yml` [#612](https://github.com/canonical/sphinx-stack/pull/#612) -* `CONTRIBUTING.md` [#632](https://github.com/canonical/sphinx-stack/pull/632) +* `.github/workflows/cla-check.yml` [#606](https://github.com/canonical/sphinx-stack/pull/606), [#648](https://github.com/canonical/sphinx-stack/pull/648) +* `.github/workflows/check-removed-urls.yml` [#612](https://github.com/canonical/sphinx-stack/pull/#612), [#648](https://github.com/canonical/sphinx-stack/pull/648) +* `.github/workflows/markdown-style-checks.yml` [#648](https://github.com/canonical/sphinx-stack/pull/648) +* `.github/workflows/sphinx-python-dependency-build-checks.yml` [#648](https://github.com/canonical/sphinx-stack/pull/648) ## 2.0