From e128757c33ce6f0412a8181d368394234f265b21 Mon Sep 17 00:00:00 2001 From: Joyce Date: Mon, 25 Sep 2023 11:31:47 -0300 Subject: [PATCH 01/10] hash pin release.yml Signed-off-by: Joyce --- .github/workflows/release.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 53a79ad3f..7065e28c9 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,7 +20,7 @@ jobs: name: Release runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 with: fetch-depth: 0 - run: | @@ -63,19 +63,19 @@ jobs: echo ${{ steps.info.outputs.name }} echo ${{ steps.info.outputs.commit }} cat CURRENT.md - - uses: softprops/action-gh-release@v1 + - uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1 with: body_path: CURRENT.md name: ${{ steps.info.outputs.name }} tag_name: ${{ steps.info.outputs.tag }} target_commitish: ${{ steps.info.outputs.commit }} draft: true - - uses: pypa/gh-action-pypi-publish@master + - uses: pypa/gh-action-pypi-publish@c5d8ac5008d27a4272a68c6b8cd8ba14cc4dcd49 # master with: user: __token__ password: ${{ secrets.TEST_PYPI_TOKEN }} repository_url: https://test.pypi.org/legacy/ - #- uses: pypa/gh-action-pypi-publish@master + #- uses: pypa/gh-action-pypi-publish@c5d8ac5008d27a4272a68c6b8cd8ba14cc4dcd49 # master # with: # user: __token__ # password: ${{ secrets.PYPI_TOKEN }} From ea55f266a5b70984fddc4a902324839fb6702c09 Mon Sep 17 00:00:00 2001 From: Joyce Date: Mon, 25 Sep 2023 11:33:36 -0300 Subject: [PATCH 02/10] hash pin reviewdog.yml Signed-off-by: Joyce --- .github/workflows/reviewdog.yml | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/reviewdog.yml b/.github/workflows/reviewdog.yml index d0fe77100..791da4e5d 100644 --- a/.github/workflows/reviewdog.yml +++ b/.github/workflows/reviewdog.yml @@ -16,11 +16,11 @@ jobs: name: Bazel Buildifier runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - run: | sudo python3 -m pip install -U numpy pip black pyupgrade bazel run -s --verbose_failures --experimental_repo_remote_exec //tools/lint:lint -- bazel - - uses: reviewdog/action-suggester@v1 + - uses: reviewdog/action-suggester@94877e550e6b522dc1d21231974b645ff2f084ce # v1.8.0 black: permissions: checks: write # for reviewdog/action-suggester to report issues using checks @@ -28,11 +28,11 @@ jobs: name: Python Black runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - run: | sudo python3 -m pip install -U numpy pip black pyupgrade bazel run -s --verbose_failures --experimental_repo_remote_exec //tools/lint:lint -- black - - uses: reviewdog/action-suggester@v1 + - uses: reviewdog/action-suggester@94877e550e6b522dc1d21231974b645ff2f084ce # v1.8.0 clang: permissions: checks: write # for reviewdog/action-suggester to report issues using checks @@ -40,11 +40,11 @@ jobs: name: Clang Format runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - run: | sudo python3 -m pip install -U numpy pip black pyupgrade bazel run -s --verbose_failures --experimental_repo_remote_exec //tools/lint:lint -- clang - - uses: reviewdog/action-suggester@v1 + - uses: reviewdog/action-suggester@94877e550e6b522dc1d21231974b645ff2f084ce # v1.8.0 pyupgrade: permissions: checks: write # for reviewdog/action-suggester to report issues using checks @@ -52,8 +52,8 @@ jobs: name: Python Pyupgrade runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - run: | sudo python3 -m pip install -U numpy pip black pyupgrade bazel run -s --verbose_failures --experimental_repo_remote_exec //tools/lint:lint -- pyupgrade - - uses: reviewdog/action-suggester@v1 + - uses: reviewdog/action-suggester@94877e550e6b522dc1d21231974b645ff2f084ce # v1.8.0 From 31aefdeea4cb40f01143153e7c0b2eecff1df551 Mon Sep 17 00:00:00 2001 From: Joyce Date: Mon, 25 Sep 2023 11:34:36 -0300 Subject: [PATCH 03/10] hash pin release.note.yml Signed-off-by: Joyce --- .github/workflows/release.note.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.note.yml b/.github/workflows/release.note.yml index ec65c10d3..3117331d8 100644 --- a/.github/workflows/release.note.yml +++ b/.github/workflows/release.note.yml @@ -16,7 +16,7 @@ jobs: name: README.md runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 with: fetch-depth: 0 - run: git tag @@ -24,7 +24,7 @@ jobs: - run: git diff - run: python3 tools/release/note_update.py - run: git diff - - uses: peter-evans/create-pull-request@v3 + - uses: peter-evans/create-pull-request@18f7dc018cc2cd597073088f7c7591b9d1c02672 # v3.14.0 with: commit-message: Update RELEASE.md [bot] branch: bot-RELEASE.md From b3110d8add592d5cf4c3503a9e4c746c0da7055d Mon Sep 17 00:00:00 2001 From: Joyce Date: Mon, 25 Sep 2023 11:38:14 -0300 Subject: [PATCH 04/10] hash pin benchmarks.yml Signed-off-by: Joyce --- .github/workflows/benchmarks.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml index 58c5b50c2..9974bd11b 100644 --- a/.github/workflows/benchmarks.yml +++ b/.github/workflows/benchmarks.yml @@ -19,8 +19,8 @@ jobs: python: ['3.8'] version: ['tensorflow:tensorflow-io-nightly', 'tensorflow:tensorflow-io'] steps: - - uses: actions/checkout@v2 - - uses: actions/setup-python@v1 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/setup-python@0f07f7f756721ebd886c2462646a35f78a8bc4de # v1.2.4 with: python-version: ${{ matrix.python }} - name: Setup macOS @@ -58,10 +58,10 @@ jobs: python: ['3.8'] version: ['tensorflow:tensorflow-io-nightly', 'tensorflow:tensorflow-io'] steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 with: fetch-depth: 0 - - uses: actions/setup-python@v1 + - uses: actions/setup-python@0f07f7f756721ebd886c2462646a35f78a8bc4de # v1.2.4 with: python-version: ${{ matrix.python }} - name: Setup Linux @@ -87,7 +87,7 @@ jobs: python -c 'from tensorflow_io_gcs_filesystem.core.python.ops import plugin_gs; print(plugin_gs)' python -m pytest --benchmark-only --benchmark-json benchmark.json -v --import-mode=append $(find . -type f \( -iname "test_*.py" ! \( -iname "test_*_v1.py" -o -iname "test_bigquery.py" \) \)) - name: Store benchmark result - uses: rhysd/github-action-benchmark@v1 + uses: rhysd/github-action-benchmark@70405016b032d44f409e4b1b451c40215cbe2393 # v1.18.0 with: name: Tensorflow-IO Benchmarks tool: 'pytest' From e8a86febdd90bc55667be893d30cf8851578f726 Mon Sep 17 00:00:00 2001 From: Joyce Date: Mon, 25 Sep 2023 11:38:59 -0300 Subject: [PATCH 05/10] hash pin api.yml Signed-off-by: Joyce --- .github/workflows/api.yml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/api.yml b/.github/workflows/api.yml index 19c3f6d70..27dbf6d9b 100644 --- a/.github/workflows/api.yml +++ b/.github/workflows/api.yml @@ -22,8 +22,8 @@ jobs: python: ['3.8'] version: ['tensorflow:tensorflow-io-nightly', 'tf-nightly:tensorflow-io', 'tf-nightly:tensorflow-io-nightly'] steps: - - uses: actions/checkout@v2 - - uses: actions/setup-python@v1 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/setup-python@0f07f7f756721ebd886c2462646a35f78a8bc4de # v1.2.4 with: python-version: ${{ matrix.python }} - run: | @@ -65,8 +65,8 @@ jobs: python: ['3.8'] version: ['tensorflow:tensorflow-io-nightly', 'tf-nightly:tensorflow-io', 'tf-nightly:tensorflow-io-nightly'] steps: - - uses: actions/checkout@v2 - - uses: actions/setup-python@v1 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/setup-python@0f07f7f756721ebd886c2462646a35f78a8bc4de # v1.2.4 with: python-version: ${{ matrix.python }} - name: Setup Linux @@ -120,11 +120,11 @@ jobs: python: ['3.8'] version: ['tensorflow:tensorflow-io-nightly', 'tf-nightly:tensorflow-io', 'tf-nightly:tensorflow-io-nightly'] steps: - - uses: actions/checkout@v2 - - uses: actions/setup-python@v1 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/setup-python@0f07f7f756721ebd886c2462646a35f78a8bc4de # v1.2.4 with: python-version: ${{ matrix.python }} - - uses: actions/setup-node@v1 + - uses: actions/setup-node@f1f314fca9dfce2769ece7d933488f076716723e # v1.4.6 with: node-version: '8.x' - name: Setup Windows From dc781a63d60331ffe1c5251f79c682841c450955 Mon Sep 17 00:00:00 2001 From: Joyce Date: Mon, 25 Sep 2023 11:49:44 -0300 Subject: [PATCH 06/10] hash pin build.yml part 1 Signed-off-by: Joyce --- .github/workflows/build.yml | 188 ++++++++++++++++++------------------ 1 file changed, 94 insertions(+), 94 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 6cf5e4699..744e50e3e 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -20,7 +20,7 @@ jobs: name: Lint runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - name: Run Lint Script for Bazel/Pyupgrade/Black/Clang run: | set -x -e @@ -32,7 +32,7 @@ jobs: name: Lint for Docs runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - name: Run Lint Script for Docs run: | set -x -e @@ -54,13 +54,13 @@ jobs: name: macOS runs-on: macOS-11 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - name: GCP run: | cat > service_account_creds.json << EOF ${{ secrets.GCP_CREDS }} EOF - - uses: actions/setup-python@v1 + - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 with: python-version: "3.8" - name: macOS @@ -87,7 +87,7 @@ jobs: REPO_NAME: ${{ env.REPO_NAME }} EVENT_NAME: ${{ env.EVENT_NAME }} steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - name: GCP run: | cat > service_account_creds.json << EOF @@ -111,7 +111,7 @@ jobs: name: Bazel macOS arm64 runs-on: [self-hosted, macOS, ARM64] steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - name: GCP run: | cat > service_account_creds.json << EOF @@ -125,7 +125,7 @@ jobs: # export BAZEL_OPTIMIZATION="$BAZEL_OPTIMIZATION --remote_upload_local_results=true --google_credentials=service_account_creds.json" # fi bash -e .github/workflows/build.bazel.sh python3 - - uses: actions/upload-artifact@v2 + - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ runner.os }}-arm64-bazel-bin path: | @@ -140,8 +140,8 @@ jobs: matrix: python: ['3.7', '3.8', '3.9', '3.10', '3.11'] steps: - - uses: actions/checkout@v2 - - uses: actions/download-artifact@v1 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-arm64-bazel-bin path: bazel-bin @@ -168,7 +168,7 @@ jobs: cp $f wheelhouse done ls wheelhouse/* - - uses: actions/upload-artifact@v2 + - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ runner.os }}-arm64-${{ matrix.python }}-wheel path: wheelhouse @@ -177,13 +177,13 @@ jobs: name: Bazel macOS runs-on: macOS-11 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - name: GCP run: | cat > service_account_creds.json << EOF ${{ secrets.GCP_CREDS }} EOF - - uses: actions/setup-python@v1 + - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 with: python-version: "3.8" - name: Bazel on macOS @@ -194,7 +194,7 @@ jobs: export BAZEL_OPTIMIZATION="$BAZEL_OPTIMIZATION --remote_upload_local_results=true --google_credentials=service_account_creds.json" fi sudo -E -H bash -e .github/workflows/build.bazel.sh python3 - - uses: actions/upload-artifact@v2 + - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ runner.os }}-bazel-bin path: | @@ -213,12 +213,12 @@ jobs: matrix: python: ['3.7', '3.8', '3.9', '3.10', '3.11'] steps: - - uses: actions/checkout@v2 - - uses: actions/download-artifact@v1 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-bazel-bin path: bazel-bin - - uses: actions/setup-python@v1 + - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 with: python-version: ${{ matrix.python }} - name: Wheel ${{ matrix.python }} macOS @@ -241,7 +241,7 @@ jobs: cp $f wheelhouse done ls wheelhouse/* - - uses: actions/upload-artifact@v2 + - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ runner.os }}-${{ matrix.python }}-wheel path: wheelhouse @@ -254,12 +254,12 @@ jobs: matrix: python: ['3.8', '3.9'] steps: - - uses: actions/checkout@v2 - - uses: actions/download-artifact@v1 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-${{ matrix.python }}-wheel path: wheelhouse - - uses: actions/setup-python@v1 + - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 with: python-version: ${{ matrix.python }} - run: | @@ -296,7 +296,7 @@ jobs: REPO_NAME: ${{ env.REPO_NAME }} EVENT_NAME: ${{ env.EVENT_NAME }} steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - name: GCP run: | cat > service_account_creds.json << EOF @@ -312,7 +312,7 @@ jobs: fi bash -x -e .github/workflows/build.bazel.sh python3.8 sudo cp .bazelrc build/tensorflow_io/ - - uses: actions/upload-artifact@v2 + - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ runner.os }}-bazel-bin path: | @@ -327,8 +327,8 @@ jobs: matrix: python: ['3.7', '3.8', '3.9', '3.10', '3.11'] steps: - - uses: actions/checkout@v2 - - uses: actions/download-artifact@v1 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-bazel-bin path: bazel-bin @@ -348,7 +348,7 @@ jobs: done sudo chown -R $(id -nu):$(id -ng) . ls wheelhouse/* - - uses: actions/upload-artifact@v2 + - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ runner.os }}-${{ matrix.python }}-wheel path: wheelhouse @@ -361,8 +361,8 @@ jobs: matrix: python: ['3.8', '3.9'] steps: - - uses: actions/checkout@v2 - - uses: actions/download-artifact@v1 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-${{ matrix.python }}-wheel path: wheelhouse @@ -393,7 +393,7 @@ jobs: name: Bazel Windows runs-on: windows-2022 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - uses: egor-tensin/vs-shell@v2 with: arch: x64 @@ -425,7 +425,7 @@ jobs: cp -r bazel-bin/tensorflow_io build cp -r bazel-bin/tensorflow_io_gcs_filesystem build bash -c "find build -not -name '*.so' -type f | xargs rm -rf" - - uses: actions/upload-artifact@v2 + - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ runner.os }}-bazel-bin path: | @@ -440,12 +440,12 @@ jobs: matrix: python: ['3.7', '3.8', '3.9', '3.10', '3.11'] steps: - - uses: actions/checkout@v2 - - uses: actions/download-artifact@v1 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-bazel-bin path: bazel-bin - - uses: actions/setup-python@v1 + - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 with: python-version: ${{ matrix.python }} - name: Wheel ${{ matrix.python }} Windows @@ -458,7 +458,7 @@ jobs: rm -rf build python setup.py --project tensorflow-io-gcs-filesystem --data bazel-bin -q bdist_wheel ls -la dist - - uses: actions/upload-artifact@v2 + - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ runner.os }}-${{ matrix.python }}-wheel path: dist @@ -471,15 +471,15 @@ jobs: matrix: python: ['3.8', '3.9'] steps: - - uses: actions/checkout@v2 - - uses: actions/download-artifact@v1 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-${{ matrix.python }}-wheel path: wheel - - uses: actions/setup-python@v1 + - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 with: python-version: ${{ matrix.python }} - - uses: actions/setup-node@v1 + - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 with: node-version: '8.x' - name: Setup ${{ matrix.python }} Windows @@ -525,83 +525,83 @@ jobs: needs: [linux-wheel, macos-wheel, macos-arm64-wheel] #, windows-wheel] runs-on: ubuntu-20.04 steps: - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: macOS-arm64-3.7-wheel path: macOS-arm64-3.7-wheel - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: macOS-arm64-3.8-wheel path: macOS-arm64-3.8-wheel - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: macOS-arm64-3.9-wheel path: macOS-arm64-3.9-wheel - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: macOS-arm64-3.10-wheel path: macOS-arm64-3.10-wheel - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: macOS-arm64-3.11-wheel path: macOS-arm64-3.11-wheel - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: macOS-3.7-wheel path: macOS-3.7-wheel - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: macOS-3.8-wheel path: macOS-3.8-wheel - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: macOS-3.9-wheel path: macOS-3.9-wheel - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: macOS-3.10-wheel path: macOS-3.10-wheel - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: macOS-3.11-wheel path: macOS-3.11-wheel - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: Linux-3.7-wheel path: Linux-3.7-wheel - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: Linux-3.8-wheel path: Linux-3.8-wheel - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: Linux-3.9-wheel path: Linux-3.9-wheel - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: Linux-3.10-wheel path: Linux-3.10-wheel - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: Linux-3.11-wheel path: Linux-3.11-wheel - #- uses: actions/download-artifact@v1 + #- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 # with: # name: Windows-3.7-wheel # path: Windows-3.7-wheel - #- uses: actions/download-artifact@v1 + #- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 # with: # name: Windows-3.8-wheel # path: Windows-3.8-wheel - #- uses: actions/download-artifact@v1 + #- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 # with: # name: Windows-3.9-wheel # path: Windows-3.9-wheel - #- uses: actions/download-artifact@v1 + #- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 # with: # name: Windows-3.10-wheel # path: Windows-3.10-wheel - #- uses: actions/download-artifact@v1 + #- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 # with: # name: Windows-3.11-wheel # path: Windows-3.11-wheel @@ -630,7 +630,7 @@ jobs: # cp Windows-3.11-wheel/*.whl wheelhouse/ ls -la wheelhouse/ sha256sum wheelhouse/*.whl - - uses: actions/upload-artifact@v2 + - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: tensorflow-io-release path: wheelhouse @@ -641,8 +641,8 @@ jobs: needs: [lint, release] runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@v2 - - uses: actions/download-artifact@v1 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: tensorflow-io-release path: wheelhouse @@ -681,8 +681,8 @@ jobs: needs: [lint, linux-test, macos-test, windows-test] runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@v2 - - uses: actions/setup-python@v1 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 with: python-version: 3.8 - run: | @@ -706,7 +706,7 @@ jobs: set -e -x BUILD_NUMBER=$(date "+%Y%m%d%H%M%S") echo ${BUILD_NUMBER} > BUILD_NUMBER - - uses: actions/upload-artifact@v2 + - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: BUILD_NUMBER path: BUILD_NUMBER @@ -720,17 +720,17 @@ jobs: matrix: python: ['3.7', '3.8', '3.9', '3.10', '3.11'] steps: - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: BUILD_NUMBER - uses: einaregilsson/build-number@v3 - run: echo "Build number is $BUILD_NUMBER" - - uses: actions/checkout@v2 - - uses: actions/download-artifact@v1 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-bazel-bin path: bazel-bin - - uses: actions/setup-python@v1 + - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 with: python-version: ${{ matrix.python }} - name: Wheel ${{ matrix.python }} macOS @@ -753,7 +753,7 @@ jobs: cp $f wheelhouse done ls wheelhouse/* - - uses: actions/upload-artifact@v2 + - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ runner.os }}-${{ matrix.python }}-nightly path: wheelhouse @@ -767,13 +767,13 @@ jobs: matrix: python: ['3.7', '3.8', '3.9', '3.10', '3.11'] steps: - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: BUILD_NUMBER - uses: einaregilsson/build-number@v3 - run: echo "Build number is $BUILD_NUMBER" - - uses: actions/checkout@v2 - - uses: actions/download-artifact@v1 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-bazel-bin path: bazel-bin @@ -793,7 +793,7 @@ jobs: done sudo chown -R $(id -nu):$(id -ng) . ls wheelhouse/* - - uses: actions/upload-artifact@v2 + - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ runner.os }}-${{ matrix.python }}-nightly path: wheelhouse @@ -807,17 +807,17 @@ jobs: matrix: python: ['3.7', '3.8', '3.9', '3.10', '3.11'] steps: - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: BUILD_NUMBER - uses: einaregilsson/build-number@v3 - run: echo "Build number is $BUILD_NUMBER" - - uses: actions/checkout@v2 - - uses: actions/download-artifact@v1 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-bazel-bin path: bazel-bin - - uses: actions/setup-python@v1 + - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 with: python-version: ${{ matrix.python }} - name: Wheel ${{ matrix.python }} Windows @@ -830,7 +830,7 @@ jobs: rm -rf build python setup.py --project tensorflow-io-gcs-filesystem --data bazel-bin -q bdist_wheel --nightly %BUILD_NUMBER% ls -la dist - - uses: actions/upload-artifact@v2 + - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ runner.os }}-${{ matrix.python }}-nightly path: dist @@ -841,63 +841,63 @@ jobs: needs: [linux-nightly, macos-nightly, windows-nightly] runs-on: ubuntu-20.04 steps: - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: macOS-3.7-nightly path: macOS-3.7-nightly - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: macOS-3.8-nightly path: macOS-3.8-nightly - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: macOS-3.9-nightly path: macOS-3.9-nightly - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: macOS-3.10-nightly path: macOS-3.10-nightly - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: macOS-3.11-nightly path: macOS-3.11-nightly - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: Linux-3.7-nightly path: Linux-3.7-nightly - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: Linux-3.8-nightly path: Linux-3.8-nightly - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: Linux-3.9-nightly path: Linux-3.9-nightly - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: Linux-3.10-nightly path: Linux-3.10-nightly - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: Linux-3.11-nightly path: Linux-3.11-nightly - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: Windows-3.7-nightly path: Windows-3.7-nightly - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: Windows-3.8-nightly path: Windows-3.8-nightly - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: Windows-3.9-nightly path: Windows-3.9-nightly - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: Windows-3.10-nightly path: Windows-3.10-nightly - - uses: actions/download-artifact@v1 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: Windows-3.11-nightly path: Windows-3.11-nightly @@ -957,8 +957,8 @@ jobs: needs: [linux-nightly, macos-nightly, windows-nightly] runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@v2 - - uses: actions/setup-python@v1 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 with: python-version: 3.8 - run: | From d5c41772158ee86ed9ce6e1b3291a99e0c33af6f Mon Sep 17 00:00:00 2001 From: Joyce Date: Mon, 25 Sep 2023 12:02:15 -0300 Subject: [PATCH 07/10] hash pin build.yml part 2 Signed-off-by: Joyce --- .github/workflows/build.yml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 744e50e3e..e874b2213 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -394,7 +394,7 @@ jobs: runs-on: windows-2022 steps: - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - - uses: egor-tensin/vs-shell@v2 + - uses: egor-tensin/vs-shell@9a932a62d05192eae18ca370155cf877eecc2202 # v2 with: arch: x64 - name: GCP @@ -664,12 +664,12 @@ jobs: COPY wheelhouse.commit /wheelhouse.commit COPY wheelhouse.version /wheelhouse.version EOF - - uses: docker/setup-buildx-action@v1 - - uses: docker/login-action@v1 + - uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0 + - uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0 with: username: tfsigio password: ${{ secrets.DOCKER_PASSWORD }} - - uses: docker/build-push-action@v2 + - uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0 with: context: . push: true @@ -723,7 +723,7 @@ jobs: - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: BUILD_NUMBER - - uses: einaregilsson/build-number@v3 + - uses: einaregilsson/build-number@46decf22c413b48c8923e98b2b5836f8aaf7781e # v3 - run: echo "Build number is $BUILD_NUMBER" - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 @@ -770,7 +770,7 @@ jobs: - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: BUILD_NUMBER - - uses: einaregilsson/build-number@v3 + - uses: einaregilsson/build-number@46decf22c413b48c8923e98b2b5836f8aaf7781e # v3 - run: echo "Build number is $BUILD_NUMBER" - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 @@ -810,7 +810,7 @@ jobs: - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: BUILD_NUMBER - - uses: einaregilsson/build-number@v3 + - uses: einaregilsson/build-number@46decf22c413b48c8923e98b2b5836f8aaf7781e # v3 - run: echo "Build number is $BUILD_NUMBER" - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 From 8852a0e8c07f2dd0e514d48e5c676e4539250574 Mon Sep 17 00:00:00 2001 From: Joyce Date: Mon, 25 Sep 2023 12:06:16 -0300 Subject: [PATCH 08/10] Create dependabot.yml Signed-off-by: Joyce --- .github/dependabot.yml | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..6d6161489 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,25 @@ +# Copyright 2023 Google LLC +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. + +version: 2 +updates: + - package-ecosystem: github-actions + directory: / + schedule: + interval: daily + groups: + github-actions: + patterns: + - "*" + # open-pull-requests-limit: 3 From 58c0594bbc123fc3cab2de35a77c7c7cd0783d1e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 25 Sep 2023 15:11:53 +0000 Subject: [PATCH 09/10] Bump the github-actions group with 4 updates Bumps the github-actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-python](https://github.com/actions/setup-python), [actions/setup-node](https://github.com/actions/setup-node) and [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request). Updates `actions/checkout` from 2.7.0 to 4.1.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/ee0669bd1cc54295c223e0bb666b733df41de1c5...8ade135a41bc03ea155e62e844d188df1ea18608) Updates `actions/setup-python` from 1.2.4 to 4.7.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v1.2.4...61a6322f88396a6271a6ee3565807d608ecaddd1) Updates `actions/setup-node` from 1.4.6 to 3.8.1 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v1.4.6...5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d) Updates `peter-evans/create-pull-request` from 3.14.0 to 5.0.2 - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](https://github.com/peter-evans/create-pull-request/compare/18f7dc018cc2cd597073088f7c7591b9d1c02672...153407881ec5c347639a548ade7d8ad1d6740e38) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: peter-evans/create-pull-request dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/api.yml | 14 +++++----- .github/workflows/benchmarks.yml | 8 +++--- .github/workflows/build.yml | 42 +++++++++++++++--------------- .github/workflows/release.note.yml | 4 +-- .github/workflows/release.yml | 2 +- .github/workflows/reviewdog.yml | 8 +++--- 6 files changed, 39 insertions(+), 39 deletions(-) diff --git a/.github/workflows/api.yml b/.github/workflows/api.yml index 27dbf6d9b..d333ec45e 100644 --- a/.github/workflows/api.yml +++ b/.github/workflows/api.yml @@ -22,8 +22,8 @@ jobs: python: ['3.8'] version: ['tensorflow:tensorflow-io-nightly', 'tf-nightly:tensorflow-io', 'tf-nightly:tensorflow-io-nightly'] steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - - uses: actions/setup-python@0f07f7f756721ebd886c2462646a35f78a8bc4de # v1.2.4 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 + - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 with: python-version: ${{ matrix.python }} - run: | @@ -65,8 +65,8 @@ jobs: python: ['3.8'] version: ['tensorflow:tensorflow-io-nightly', 'tf-nightly:tensorflow-io', 'tf-nightly:tensorflow-io-nightly'] steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - - uses: actions/setup-python@0f07f7f756721ebd886c2462646a35f78a8bc4de # v1.2.4 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 + - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 with: python-version: ${{ matrix.python }} - name: Setup Linux @@ -120,11 +120,11 @@ jobs: python: ['3.8'] version: ['tensorflow:tensorflow-io-nightly', 'tf-nightly:tensorflow-io', 'tf-nightly:tensorflow-io-nightly'] steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - - uses: actions/setup-python@0f07f7f756721ebd886c2462646a35f78a8bc4de # v1.2.4 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 + - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 with: python-version: ${{ matrix.python }} - - uses: actions/setup-node@f1f314fca9dfce2769ece7d933488f076716723e # v1.4.6 + - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 with: node-version: '8.x' - name: Setup Windows diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml index 9974bd11b..1f12a6295 100644 --- a/.github/workflows/benchmarks.yml +++ b/.github/workflows/benchmarks.yml @@ -19,8 +19,8 @@ jobs: python: ['3.8'] version: ['tensorflow:tensorflow-io-nightly', 'tensorflow:tensorflow-io'] steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - - uses: actions/setup-python@0f07f7f756721ebd886c2462646a35f78a8bc4de # v1.2.4 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 + - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 with: python-version: ${{ matrix.python }} - name: Setup macOS @@ -58,10 +58,10 @@ jobs: python: ['3.8'] version: ['tensorflow:tensorflow-io-nightly', 'tensorflow:tensorflow-io'] steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 with: fetch-depth: 0 - - uses: actions/setup-python@0f07f7f756721ebd886c2462646a35f78a8bc4de # v1.2.4 + - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 with: python-version: ${{ matrix.python }} - name: Setup Linux diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index e874b2213..7ea6f032a 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -20,7 +20,7 @@ jobs: name: Lint runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: Run Lint Script for Bazel/Pyupgrade/Black/Clang run: | set -x -e @@ -32,7 +32,7 @@ jobs: name: Lint for Docs runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: Run Lint Script for Docs run: | set -x -e @@ -54,7 +54,7 @@ jobs: name: macOS runs-on: macOS-11 steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: GCP run: | cat > service_account_creds.json << EOF @@ -87,7 +87,7 @@ jobs: REPO_NAME: ${{ env.REPO_NAME }} EVENT_NAME: ${{ env.EVENT_NAME }} steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: GCP run: | cat > service_account_creds.json << EOF @@ -111,7 +111,7 @@ jobs: name: Bazel macOS arm64 runs-on: [self-hosted, macOS, ARM64] steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: GCP run: | cat > service_account_creds.json << EOF @@ -140,7 +140,7 @@ jobs: matrix: python: ['3.7', '3.8', '3.9', '3.10', '3.11'] steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-arm64-bazel-bin @@ -177,7 +177,7 @@ jobs: name: Bazel macOS runs-on: macOS-11 steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: GCP run: | cat > service_account_creds.json << EOF @@ -213,7 +213,7 @@ jobs: matrix: python: ['3.7', '3.8', '3.9', '3.10', '3.11'] steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-bazel-bin @@ -254,7 +254,7 @@ jobs: matrix: python: ['3.8', '3.9'] steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-${{ matrix.python }}-wheel @@ -296,7 +296,7 @@ jobs: REPO_NAME: ${{ env.REPO_NAME }} EVENT_NAME: ${{ env.EVENT_NAME }} steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: GCP run: | cat > service_account_creds.json << EOF @@ -327,7 +327,7 @@ jobs: matrix: python: ['3.7', '3.8', '3.9', '3.10', '3.11'] steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-bazel-bin @@ -361,7 +361,7 @@ jobs: matrix: python: ['3.8', '3.9'] steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-${{ matrix.python }}-wheel @@ -393,7 +393,7 @@ jobs: name: Bazel Windows runs-on: windows-2022 steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - uses: egor-tensin/vs-shell@9a932a62d05192eae18ca370155cf877eecc2202 # v2 with: arch: x64 @@ -440,7 +440,7 @@ jobs: matrix: python: ['3.7', '3.8', '3.9', '3.10', '3.11'] steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-bazel-bin @@ -471,7 +471,7 @@ jobs: matrix: python: ['3.8', '3.9'] steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-${{ matrix.python }}-wheel @@ -641,7 +641,7 @@ jobs: needs: [lint, release] runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: tensorflow-io-release @@ -681,7 +681,7 @@ jobs: needs: [lint, linux-test, macos-test, windows-test] runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 with: python-version: 3.8 @@ -725,7 +725,7 @@ jobs: name: BUILD_NUMBER - uses: einaregilsson/build-number@46decf22c413b48c8923e98b2b5836f8aaf7781e # v3 - run: echo "Build number is $BUILD_NUMBER" - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-bazel-bin @@ -772,7 +772,7 @@ jobs: name: BUILD_NUMBER - uses: einaregilsson/build-number@46decf22c413b48c8923e98b2b5836f8aaf7781e # v3 - run: echo "Build number is $BUILD_NUMBER" - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-bazel-bin @@ -812,7 +812,7 @@ jobs: name: BUILD_NUMBER - uses: einaregilsson/build-number@46decf22c413b48c8923e98b2b5836f8aaf7781e # v3 - run: echo "Build number is $BUILD_NUMBER" - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ runner.os }}-bazel-bin @@ -957,7 +957,7 @@ jobs: needs: [linux-nightly, macos-nightly, windows-nightly] runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 with: python-version: 3.8 diff --git a/.github/workflows/release.note.yml b/.github/workflows/release.note.yml index 3117331d8..9069bac86 100644 --- a/.github/workflows/release.note.yml +++ b/.github/workflows/release.note.yml @@ -16,7 +16,7 @@ jobs: name: README.md runs-on: ubuntu-latest steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 with: fetch-depth: 0 - run: git tag @@ -24,7 +24,7 @@ jobs: - run: git diff - run: python3 tools/release/note_update.py - run: git diff - - uses: peter-evans/create-pull-request@18f7dc018cc2cd597073088f7c7591b9d1c02672 # v3.14.0 + - uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38 # v5.0.2 with: commit-message: Update RELEASE.md [bot] branch: bot-RELEASE.md diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7065e28c9..477b60af9 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,7 +20,7 @@ jobs: name: Release runs-on: ubuntu-latest steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 with: fetch-depth: 0 - run: | diff --git a/.github/workflows/reviewdog.yml b/.github/workflows/reviewdog.yml index 791da4e5d..424383a37 100644 --- a/.github/workflows/reviewdog.yml +++ b/.github/workflows/reviewdog.yml @@ -16,7 +16,7 @@ jobs: name: Bazel Buildifier runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - run: | sudo python3 -m pip install -U numpy pip black pyupgrade bazel run -s --verbose_failures --experimental_repo_remote_exec //tools/lint:lint -- bazel @@ -28,7 +28,7 @@ jobs: name: Python Black runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - run: | sudo python3 -m pip install -U numpy pip black pyupgrade bazel run -s --verbose_failures --experimental_repo_remote_exec //tools/lint:lint -- black @@ -40,7 +40,7 @@ jobs: name: Clang Format runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - run: | sudo python3 -m pip install -U numpy pip black pyupgrade bazel run -s --verbose_failures --experimental_repo_remote_exec //tools/lint:lint -- clang @@ -52,7 +52,7 @@ jobs: name: Python Pyupgrade runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - run: | sudo python3 -m pip install -U numpy pip black pyupgrade bazel run -s --verbose_failures --experimental_repo_remote_exec //tools/lint:lint -- pyupgrade From 97a3247cc3619ed7b5644d2cf09f8f2fcd4cba20 Mon Sep 17 00:00:00 2001 From: Joyce Date: Mon, 25 Sep 2023 13:49:08 -0300 Subject: [PATCH 10/10] Update dependabot.yml max prs Signed-off-by: Joyce --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 6d6161489..dca857a3d 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -22,4 +22,4 @@ updates: github-actions: patterns: - "*" - # open-pull-requests-limit: 3 + open-pull-requests-limit: 3