MNT: Use hash for Action workflow versions and update if needed

spacetelescope / pysiaf

Handling of Science Instrument Aperture Files (SIAF) for space telescopes

https://pysiaf.readthedocs.io

BSD 3-Clause "New" or "Revised" License

13 stars 28 forks source link

MNT: Use hash for Action workflow versions and update if needed #353

Open pllim opened 1 month ago

pllim commented 1 month ago

As recommended by https://scientific-python.org/specs/spec-0008/#pin-github-actions-release-workflows-to-their-full-release-commit-shas , this PR changes your Actions workflow version pins to hashes, and updates to latest release hashes (at the time of writing) if needed.

This is an automated update made by the batchpr tool :robot: - feel free to close if it doesn't look good! You can report issues to @pllim.

:ghost:

Witchblade101 commented 1 month ago

@mfixstsci How much work does this add in the future? Does this mean we'll have to manually update hashes every time there is a new version of github actions?

pllim commented 1 month ago

No work on your end. dependabot.yml does the auto update going forward.