v0.2.0

Pull Requests | Issues | v0.1.3...v0.2.0

Changelog

• 134cde2 feat: support verifying if the commit hash of a semver comment is equivalent to a commit SHA of action version (#439)
• 26a2d0e chore(deps): update dependency aquaproj/aqua-registry to v4.186.0 (#438)
• b734bf3 refactor: split files (#437)
• e715897 style: shorten receiver names (#436)
• 6ce0fd7 refactor: split and rename files (#435)
• 1d687ce fix(deps): update module github.com/google/go-github/v61 to v62 (#416)
• 8e2d901 chore(deps): update dependency aquaproj/aqua-registry to v4.185.1 (#434)
• 92af346 chore(deps): update dependency goreleaser/goreleaser to v1.26.2 (#433)
• 224ec0e chore(deps): update dependency aquaproj/aqua-registry to v4.185.0 (#432)
• dba0710 chore(deps): update dependency aquaproj/aqua-registry to v4.184.0 (#431)
• b56d968 chore(deps): update dependency aquaproj/aqua-registry to v4.183.0 (#430)
• 4d207a6 chore(deps): update dependency aquaproj/aqua to v2.28.1 (#429)
• 4cef237 chore(deps): update dependency aquaproj/aqua-registry to v4.182.0 (#428)
• 9c73450 chore(deps): update dependency aquaproj/aqua-registry to v4.181.0 (#427)
• 02d96b0 chore(deps): update dependency aquaproj/aqua-registry to v4.180.1 (#426)
• 6e25c3a chore(deps): update actions/checkout action to v4.1.6 (#425)
• ab4341f chore(deps): update dependency goreleaser/goreleaser to v1.26.1 (#424)
• 04000cf chore(deps): update dependency aquaproj/aqua-registry to v4.180.0 (#423)
• 7cb6383 chore(deps): update dependency aquaproj/aqua-registry to v4.179.0 (#422)
• 7106ee1 chore(deps): update dependency aquaproj/aqua-registry to v4.178.0 (#421)
• 56e0b67 chore(deps): update dependency goreleaser/goreleaser to v1.26.0 (#420)
• 20e2c46 chore(deps): update dependency aquaproj/aqua-registry to v4.177.0 (#419)
• b848967 chore(deps): update dependency aquaproj/aqua to v2.28.0 (#418)
• b191d72 chore(deps): update suzuki-shunsuke/go-release-workflow action to v1.0.2 (#417)
• 99351a9 chore(deps): update dependency aquaproj/aqua to v2.27.4 (#412)
• 4c59a8d chore(deps): update suzuki-shunsuke/go-mod-tidy-workflow action to v1.0.1 (#415)
• c5c2cc7 chore(deps): update suzuki-shunsuke/actionlint-workflow action to v1.0.1 (#414)
• 4ba7ddd chore(deps): update aquaproj/update-checksum-workflow action to v1.0.1 (#413)
• 0dc3a67 chore(deps): update aquaproj/aqua-installer action to v3.0.1 (#411)
• 2de524c chore(deps): update dependency aquaproj/aqua-registry to v4.176.0 (#410)
• f8bca0a chore(deps): update dependency aquaproj/aqua-registry to v4.175.0 (#409)
• 7c474f9 chore(deps): update actions/checkout action to v4.1.5 (#408)
• d05a6c9 chore(deps): update dependency rhysd/actionlint to v1.7.0 (#407)
• f7f3d0e chore(deps): update dependency aquaproj/aqua-registry to v4.174.0 (#406)
• 1ce7744 chore(deps): update dependency golang/go to v1.22.3 (#405)
• 797a710 chore(deps): update dependency golang/go to v1.22.3 (#405)
• a3a8eca chore(deps): update dependency aquaproj/aqua-registry to v4.173.0 (#404)
• 8fac219 chore(deps): update dependency aquaproj/aqua-registry to v4.172.0 (#403)
• ef50dfc fix(deps): update module golang.org/x/oauth2 to v0.20.0 (#402)
• 2c416d6 chore(deps): update dependency aquaproj/aqua-registry to v4.171.0 (#401)
• 763df42 chore(deps): update dependency aquaproj/aqua-registry to v4.170.0 (#399)
• fdfdd26 chore(deps): update actions/setup-go action to v5.0.1 (#398)
• 628a917 chore(deps): update dependency aquaproj/aqua-registry to v4.169.0 (#397)

v0.1.3

Pull Requests | Issues | v0.1.2...v0.1.3

Features

#393 #394 Add .github/pinact.yaml as a default config path @kachick

Others

Update Go 1.20.5 to 1.22.2

v0.1.2-3

v0.1.2...v0.1.2-3

v0.1.2-2

v0.1.2...v0.1.2-2

v0.1.3-1

v0.1.2...v0.1.3-1

Update Go to v1.22.1
#358 Support lines with quotes @kazuki-hanai

v0.1.2

Pull Requests | Issues | v0.1.1...v0.1.2

Features

#99 Support configuration files
#99 Add a subcommand init to generate a configuration file

About Configuration file, please see Configuration.

• Support ignoring specific actions and reusable workflows
• Support specifying target files by regular expressions

e.g. .pinact.yaml

files:
  - pattern: "^\\.github/workflows/.*\\.ya?ml$"
  - pattern: "^(.*/)?action\\.ya?ml$"

ignore_actions:
  - name: actions/setup-java
  - name: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml

Add a subcommand init to generate a configuration file

$ pinact init # .pinact.yaml is generated.

v0.1.2-1

Pull Requests | Issues | v0.1.1...v0.1.2-1

Changelog

• 2c71268 ci: add a test
• 476c4ce feat: support configuration files
• 46bafa3 Merge pull request #98 from suzuki-shunsuke/renovate/goreleaser-goreleaser-1.x
• 0108f48 chore(aqua): update aqua/aqua-checksums.json
• 461939c chore(deps): update dependency goreleaser/goreleaser to v1.19.2

v0.1.1

Pull Requests | Issues | v0.1.0...v0.1.1

🐛 Bug Fixes

#95 #97 Keep lines of 404 actions
#96 #97 Skip actions pinned with full commit hash

Keep lines of 404 actions

AS IS

pinact v0.1.0 has a bug that if some actions are not found, the lines are removed.

$ pinact version
pinact version 0.1.0 (8ccd55944c83ff1f4d738343c28d4a6109246d06)

foo.yaml

name: foo
on: workflow_call
jobs:
  foo:
    runs-on: ubuntu-latest
    steps:
      - uses: suzuki-shunsuke/repo-404@83b7061638ee4956cf7545a6f7efe594e5ad0247

$ pinact run foo.yaml 
WARN[0000] get a reference                               error="GET https://api.github.com/repos/suzuki-shunsuke/repo-404/commits/83b7061638ee4956cf7545a6f7efe594e5ad0247: 404 Not Found []" pinact_version=0.1.0 program=pinact workflow_file=foo.yaml

$ git diff foo.yaml 
diff --git a/foo.yaml b/foo.yaml
index 7c23799..9ba4f83 100644
--- a/foo.yaml
+++ b/foo.yaml
@@ -4,4 +4,4 @@ jobs:
   foo:
     runs-on: ubuntu-latest
     steps:
-      - uses: suzuki-shunsuke/repo-404@83b7061638ee4956cf7545a6f7efe594e5ad0247
+

TO BE

pinact v0.1.1 fixed the bug.
If actions are not found, pinact ignores those actions.

$ pinact run foo.yaml 
WARN[0000] get a reference                               error="GET https://api.github.com/repos/suzuki-shunsuke/repo-404/commits/83b7061638ee4956cf7545a6f7efe594e5ad0247: 404 Not Found []" pinact_version=0.1.1 program=pinact workflow_file=foo.yaml

$ git diff foo.yaml # No change

Skip actions pinned with full commit hash

pinact v0.1.0 has a bug that if some actions are pinned by commit hash but don't have code comment, commit hash are commented.

$ pinact version
pinact version 0.1.0 (8ccd55944c83ff1f4d738343c28d4a6109246d06)

foo.yaml

name: foo
on: workflow_call
jobs:
  foo:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@83b7061638ee4956cf7545a6f7efe594e5ad0247

$ pinact run foo.yaml 

$ git diff foo.yaml
diff --git a/foo.yaml b/foo.yaml
index a52749f..c4c3f7f 100644
--- a/foo.yaml
+++ b/foo.yaml
@@ -4,4 +4,4 @@ jobs:
   foo:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@83b7061638ee4956cf7545a6f7efe594e5ad0247
+      - uses: actions/checkout@83b7061638ee4956cf7545a6f7efe594e5ad0247 # 83b7061638ee4956cf7545a6f7efe594e5ad0247

TO BE

pinact v0.1.1 fixed the bug. pinact skips actions pinned with full commit hash.

$ pinact run foo.yaml
$ git diff foo.yaml # No change

v0.1.0

Pull Requests | Issues | https://github.com/suzuki-shunsuke/pinact/commits/v0.1.0

🎉 First release

v0.1.0-1

Pull Requests | Issues | ...v0.1.0-1

Changelog

• 374a4b1 ci: fix workflow
• 5992f88 test: update testdata
• 6e57e20 docs: update README
• 1e10b5d fix: fix commit hash
• 214e92d test: add testdata
• b801f09 docs: update README
• b025433 docs: update README
• 7a598e2 fix: set log level
• 2206343 test: fix testdata
• e1193e2 ci: merge integration test to test
• 90c124b fix: change log level
• c93fb3d fix: fix get ref parameter
• 3cf3f1b ci: fix workflows
• 863ac71 chore(go): go mod tidy
• e2e55c8 chore(aqua): update aqua/aqua-checksums.json
• 8101e61 fix: change log level
• 878cc0c feat: implement basic function
• fa04239 Initial commit