ci: pin github action versions

.github/workflows/autofix.yml

@@ -15,9 +15,9 @@ jobs:
   autofix:
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
-      - uses: oxc-project/setup-rust@1.0.0
+      - uses: oxc-project/setup-rust@v1.0.0
         with:
           restore-cache: false
           tools: just,cargo-shear@1,dprint

.github/workflows/benchmark.yml

@@ -64,9 +64,9 @@ jobs:
 
     steps:
       - name: Checkout Branch
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
-      - uses: oxc-project/setup-rust@1.0.0
+      - uses: oxc-project/setup-rust@v1.0.0
         with:
           cache-key: benchmark-${{ matrix.component }}
           save-cache: ${{ github.ref_name == 'main' }}
@@ -115,9 +115,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Branch
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
-      - uses: oxc-project/setup-rust@1.0.0
+      - uses: oxc-project/setup-rust@v1.0.0
         with:
           cache-key: benchmark-linter
           save-cache: ${{ github.ref_name == 'main' }}
@@ -154,7 +154,7 @@ jobs:
 
     steps:
       - name: Checkout Branch
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
       - name: Download Binary
         uses: actions/download-artifact@v4
@@ -168,7 +168,7 @@ jobs:
           chmod +x ./target/codspeed/oxc_benchmark/*
 
       - name: Install codspeed
-        uses: taiki-e/install-action@v2
+        uses: taiki-e/install-action@v2.46.8
         with:
           tool: cargo-codspeed
 
@@ -206,15 +206,15 @@ jobs:
   # if: false
   # steps:
   # - name: Checkout Branch
-  # uses: taiki-e/checkout-action@v1
+  # uses: taiki-e/checkout-action@v1.3.1
 
-  # - uses: oxc-project/setup-rust@1.0.0
+  # - uses: oxc-project/setup-rust@v1.0.0
   # with:
   # shared-key: benchmark_napi
   # save-cache: ${{ github.ref_name == 'main' }}
 
   # - name: Install codspeed
-  # uses: taiki-e/install-action@v2
+  # uses: taiki-e/install-action@v2.46.8
   # with:
   # tool: cargo-codspeed
 
@@ -254,7 +254,7 @@ jobs:
   # rm -rf target/codspeed/oxc_benchmark/*.d
 
   # - name: Run Rust benchmark
-  # uses: CodSpeedHQ/action@v2
+  # uses: CodSpeedHQ/action@v2.46.8
   # timeout-minutes: 30
   # with:
   # run: cargo codspeed run
@@ -278,7 +278,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Branch
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
       - uses: ./.github/actions/pnpm
 

.github/workflows/bloat.yml

@@ -14,9 +14,9 @@ jobs:
     name: Cargo Bloat
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
-      - uses: oxc-project/setup-rust@1.0.0
+      - uses: oxc-project/setup-rust@v1.0.0
         with:
           cache-key: warm
           tools: cargo-bloat

.github/workflows/cargo-llvm-lines.yml

@@ -15,12 +15,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
-      - uses: oxc-project/setup-rust@1.0.0
+      - uses: oxc-project/setup-rust@v1.0.0
 
       - name: Install cargo-llvm-lines
-        uses: taiki-e/install-action@v2
+        uses: taiki-e/install-action@v2.46.8
         with:
           tool: cargo-llvm-lines
 

.github/workflows/ci.yml

@@ -35,8 +35,8 @@ jobs:
           - os: macos-latest
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: taiki-e/checkout-action@v1
-      - uses: oxc-project/setup-rust@1.0.0
+      - uses: taiki-e/checkout-action@v1.3.1
+      - uses: oxc-project/setup-rust@v1.0.0
         with:
           # warm cache factory for all other CI jobs
           # cache `target` directory to avoid download crates
@@ -51,7 +51,7 @@ jobs:
     if: ${{ github.ref_name == 'main' }}
     runs-on: windows-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       # Unsung heros of the internet, who led me here to speed up window's slowness:
       # https://github.com/actions/cache/issues/752#issuecomment-1847036770
       # https://github.com/astral-sh/uv/blob/502e04200d52de30d3159894833b3db4f0d6644d/.github/workflows/ci.yml#L158
@@ -106,23 +106,23 @@ jobs:
       # Insta is not able to run on wasmtime, omit the packages that depend on it
       TEST_FLAGS: "-p oxc_ast -p oxc_cfg -p oxc_regular_expression -- --nocapture"
     steps:
-      - uses: taiki-e/checkout-action@v1
-      - uses: oxc-project/setup-rust@1.0.0
+      - uses: taiki-e/checkout-action@v1.3.1
+      - uses: oxc-project/setup-rust@v1.0.0
         with:
           cache-key: wasi
           save-cache: ${{ github.ref_name == 'main' }}
       - run: rustup target add wasm32-wasip1-threads
-      - uses: bytecodealliance/actions/wasmtime/setup@v1
+      - uses: bytecodealliance/actions/wasmtime/setup@v1.3.1
       - run: cargo test --target wasm32-wasip1-threads ${TEST_FLAGS}
       - run: git diff --exit-code # Must commit everything
 
   test-wasm32-unknown-unknown:
     name: Check wasm32-unknown-unknown
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
-      - uses: oxc-project/setup-rust@1.0.0
+      - uses: oxc-project/setup-rust@v1.0.0
         with:
           cache-key: wasm
           save-cache: ${{ github.ref_name == 'main' }}
@@ -146,7 +146,7 @@ jobs:
     name: Spell Check
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       - uses: crate-ci/[email protected]
         with:
           files: .
@@ -155,8 +155,8 @@ jobs:
     name: Clippy
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
-      - uses: oxc-project/setup-rust@1.0.0
+      - uses: taiki-e/checkout-action@v1.3.1
+      - uses: oxc-project/setup-rust@v1.0.0
         with:
           save-cache: ${{ github.ref_name == 'main' }}
           cache-key: clippy
@@ -176,8 +176,8 @@ jobs:
     name: Doc
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
-      - uses: oxc-project/setup-rust@1.0.0
+      - uses: taiki-e/checkout-action@v1.3.1
+      - uses: oxc-project/setup-rust@v1.0.0
         with:
           cache-key: warm
           components: rust-docs
@@ -187,7 +187,7 @@ jobs:
     name: Conformance
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
       - uses: dorny/paths-filter@v3
         id: filter
@@ -213,7 +213,7 @@ jobs:
       - uses: ./.github/actions/pnpm
         if: steps.filter.outputs.src == 'true'
 
-      - uses: oxc-project/setup-rust@1.0.0
+      - uses: oxc-project/setup-rust@v1.0.0
         if: steps.filter.outputs.src == 'true'
         with:
           cache-key: conformance
@@ -234,7 +234,7 @@ jobs:
     name: Minification Size
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
       - uses: dorny/paths-filter@v3
         id: filter
@@ -246,7 +246,7 @@ jobs:
               - 'crates/oxc_codegen/**'
               - 'tasks/minsize/**'
 
-      - uses: oxc-project/setup-rust@1.0.0
+      - uses: oxc-project/setup-rust@v1.0.0
         if: steps.filter.outputs.src == 'true'
         with:
           cache-key: minsize
@@ -262,14 +262,14 @@ jobs:
     name: AST Changes
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
       - uses: dorny/paths-filter@v3
         id: filter
         with:
           filters: ".github/.generated_ast_watch_list.yml"
 
-      - uses: oxc-project/setup-rust@1.0.0
+      - uses: oxc-project/setup-rust@v1.0.0
         if: steps.filter.outputs.src == 'true'
         with:
           components: rustfmt
@@ -303,14 +303,14 @@ jobs:
     name: Test NAPI
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       - uses: dorny/paths-filter@v3
         id: filter
         with:
           filters: |
             src:
               - '!crates/oxc_linter/**'
-      - uses: oxc-project/setup-rust@1.0.0
+      - uses: oxc-project/setup-rust@v1.0.0
         if: steps.filter.outputs.src == 'true'
         with:
           cache-key: warm

.github/workflows/ci_vscode.yml

@@ -28,7 +28,7 @@ jobs:
     name: Compile
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       - uses: ./.github/actions/pnpm
 
       - name: Compile VSCode
@@ -39,7 +39,7 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       - uses: ./.github/actions/pnpm
 
       - name: Lint VSCode
@@ -50,7 +50,7 @@ jobs:
     name: Type-Check
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       - uses: ./.github/actions/pnpm
 
       - name: Type-Check VSCode
@@ -61,7 +61,7 @@ jobs:
     name: Test
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       - uses: ./.github/actions/pnpm
 
       - name: Test VSCode

.github/workflows/codecov.yml

@@ -21,12 +21,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
       - name: Clone submodules
         uses: ./.github/actions/clone-submodules
 
-      - uses: oxc-project/setup-rust@1.0.0
+      - uses: oxc-project/setup-rust@v1.0.0
         with:
           cache-key: codecov
           save-cache: ${{ github.ref_name == 'main' }}
@@ -56,7 +56,7 @@ jobs:
     steps:
       - name: Checkout
         if: env.CODECOV_TOKEN
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
       - name: Download coverage file
         if: env.CODECOV_TOKEN

.github/workflows/deny.yml

@@ -25,9 +25,9 @@ jobs:
     name: Cargo Deny
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
-      - uses: oxc-project/setup-rust@1.0.0
+      - uses: oxc-project/setup-rust@v1.0.0
         with:
           restore-cache: false
           tools: cargo-deny

.github/workflows/link-check.yml

@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
       - name: Check Links
         uses: lycheeverse/lychee-action@master

.github/workflows/lint-rules.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Branch
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
       - uses: actions/setup-node@v4
         with:

.github/workflows/miri.yml

@@ -30,9 +30,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
-      - uses: oxc-project/setup-rust@1.0.0
+      - uses: oxc-project/setup-rust@v1.0.0
         with:
           cache-key: miri
           save-cache: ${{ github.ref_name == 'main' }}

.github/workflows/pr.yml

@@ -16,7 +16,7 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
       - uses: actions/labeler@v5
 
@@ -78,7 +78,7 @@ jobs:
           echo "CATEGORY=$CATEGORY" >> $GITHUB_OUTPUT
 
       - name: Add category label
-        uses: actions-ecosystem/action-add-labels@v1
+        uses: actions-ecosystem/action-add-labels@v1.3.1
         if: ${{ steps.get-category.outputs.CATEGORY != '' }}
         with:
           labels: ${{ steps.get-category.outputs.CATEGORY }}