Merge pull request #20 from paritytech/sk-pin-gha-versions

Pin GHA versions and add dependabot
paritytech · Aug 24, 2022 · 0bad54f · 0bad54f
2 parents 8001d6d + 0c5d407
commit 0bad54f
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 4 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: '/'
+    schedule:
+      interval: daily
diff --git a/.github/workflows/book.yml b/.github/workflows/book.yml
@@ -12,9 +12,9 @@ jobs:
     container:
       image: michaelfbryan/mdbook-docker-image
     steps:
-    - uses: actions/checkout@v2.4.0
+    - uses: actions/checkout@v3
     - run: mdbook build
-    - uses: actions/upload-artifact@v2
+    - uses: actions/upload-artifact@v3
       with:
         name: book
         path: ./book
@@ -24,11 +24,11 @@ jobs:
     needs: build-book
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/download-artifact@v2
+      - uses: actions/download-artifact@v3
         with:
           name: book
           path: ./book
-      - uses: peaceiris/actions-gh-pages@v3
+      - uses: peaceiris/actions-gh-pages@068dc23d9710f1ba62e86896f84735d869951305 # v3.8.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           publish_dir: ./book