diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e80436e..4ac6574 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -18,13 +18,13 @@ jobs: permissions: contents: read # Clone the repository steps: - - uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1 + - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 with: egress-policy: audit - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: cache: npm - name: Install dependencies diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml index fb42eab..2d6ba29 100644 --- a/.github/workflows/contributors.yml +++ b/.github/workflows/contributors.yml @@ -14,7 +14,7 @@ jobs: discussions: write # Create the monthly thank-you discussion via abirismyname/create-discussion steps: - - uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1 + - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 with: egress-policy: audit @@ -32,7 +32,7 @@ jobs: echo "END_DATE=$end_date" >> "$GITHUB_ENV" - name: Run contributor action - uses: github-community-projects/contributors@e1118bad7bd389d10b53b363142a11245cbaa9f8 # v2.0.19 + uses: github-community-projects/contributors@6bab24b098e0b692d679d59f97d73b9297c96c18 # v2.0.21 env: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} START_DATE: ${{ env.START_DATE }}