Use specific and latest version in actions

diff --git a/.github/workflows/build-pull-request.yml b/.github/workflows/build-pull-request.yml
index a1b7037b8bc5185cfde40648fb5965626a0390f3..31edf0c270b939a8b0785551537a83702fa5e52e 100644 (file)
--- a/.github/workflows/build-pull-request.yml
+++ b/.github/workflows/build-pull-request.yml
@@ -10,22 +10,22 @@ jobs:
         env:
           PR_NUMBER: ${{github.event.number}}
         steps:
-            - uses: actions/checkout@v2
+            - uses: actions/checkout@v2.4.0
             - name: Build
               run: npm ci && npm run build
             - name: Upload Artifact
-              uses: actions/upload-artifact@v2
+              uses: actions/upload-artifact@v2.3.1
               with:
                   name: previewbuild
                   path: dist
                   retention-days: 1
-            - uses: actions/github-script@v3.1.0
+            - uses: actions/github-script@v5.1.0
               with:
                 script: |
                     var fs = require('fs');
                     fs.writeFileSync('${{github.workspace}}/pr.json', JSON.stringify(context.payload.pull_request));
             - name: Upload PR Info
-              uses: actions/upload-artifact@v2
+              uses: actions/upload-artifact@v2.3.1
               with:
                   name: pr.json
                   path: pr.json

diff --git a/.github/workflows/deploy-pull-request.yml b/.github/workflows/deploy-pull-request.yml
index 86c5de4ff0ef7c40d30cd586cf5d2afded3961a1..6c176bc5547c95dcdd4f65ab2faf24a8bbb1a33d 100644 (file)
--- a/.github/workflows/deploy-pull-request.yml
+++ b/.github/workflows/deploy-pull-request.yml
@@ -14,7 +14,7 @@ jobs:
             # workflow_run action (https://github.com/actions/download-artifact/issues/60)
             # so instead we get this mess:
             - name: 'Download artifact'
-              uses: actions/github-script@v3.1.0
+              uses: actions/github-script@v5.1.0
               with:
                 script: |
                   var artifacts = await github.actions.listWorkflowRunArtifacts({
@@ -56,7 +56,7 @@ jobs:
                     console.log(`::set-output name=prnumber::${pr.number}`);
             - name: Deploy to Netlify
               id: netlify
-              uses: nwtgck/actions-netlify@v1.2
+              uses: nwtgck/actions-netlify@v1.2.3
               with:
                   publish-dir: dist
                   deploy-message: "Deploy from GitHub Actions"

diff --git a/.github/workflows/netlify-dev.yaml b/.github/workflows/netlify-dev.yaml
index 2289eca2561c3be457a528dba1fe977a51dea896..d961102dea4a91a117a2ef3a91115496f40db355 100644 (file)
--- a/.github/workflows/netlify-dev.yaml
+++ b/.github/workflows/netlify-dev.yaml
@@ -11,9 +11,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v1
-      - uses: jsmrcaga/action-netlify-deploy@9cc40dcd499dd1511b3cc99912444f8970411cc6
+      - uses: actions/checkout@v2.4.0
+      - uses: jsmrcaga/action-netlify-deploy@v1.7.2
         with:
+          install_command: "npm ci"
           NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
           NETLIFY_SITE_ID: ${{ secrets.NETLIFY_SITE2_ID }}
           BUILD_DIRECTORY: "dist"

diff --git a/.github/workflows/netlify-prod.yaml b/.github/workflows/netlify-prod.yaml
index b8c3c27d66bd816cdadde52e6e67334d23a854dd..150f172951f77576ae5d88b312e8a2b4c084cae9 100644 (file)
--- a/.github/workflows/netlify-prod.yaml
+++ b/.github/workflows/netlify-prod.yaml
@@ -10,9 +10,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v1
-      - uses: jsmrcaga/action-netlify-deploy@9cc40dcd499dd1511b3cc99912444f8970411cc6
+      - uses: actions/checkout@v2.4.0
+      - uses: jsmrcaga/action-netlify-deploy@v1.7.2
         with:
+          install_command: "npm ci"
           NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
           NETLIFY_SITE_ID: ${{ secrets.NETLIFY_SITE_ID }}
           BUILD_DIRECTORY: "dist"