|
66 | 66 |
|
67 | 67 | # Install Node.js: |
68 | 68 | - name: 'Install Node.js' |
69 | | - # Pin action to full length commit SHA corresponding to v3.8.1 |
70 | | - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d |
| 69 | + # Pin action to full length commit SHA |
| 70 | + uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4.0.1 |
71 | 71 | with: |
72 | 72 | node-version: 20 |
73 | 73 | timeout-minutes: 5 |
@@ -124,16 +124,10 @@ jobs: |
124 | 124 | mv ./package.json.tmp ./package.json |
125 | 125 | fi |
126 | 126 | done |
127 | | - jq -r '.devDependencies | keys[]' ./package.json | while read -r dep; do |
128 | | - if [[ "$dep" != "@stdlib"* ]]; then |
129 | | - continue |
130 | | - fi |
131 | | - dep=$(echo "$dep" | xargs) |
132 | | - if ! find lib -name "*.js" -exec grep -q "$dep" {} + && ! grep -q -s "$dep" manifest.json && ! grep -q -s "$dep" include.gypi; then |
133 | | - jq --indent 2 "del(.devDependencies[\"$dep\"])" ./package.json > ./package.json.tmp |
134 | | - mv ./package.json.tmp ./package.json |
135 | | - fi |
136 | | - done |
| 127 | +
|
| 128 | + # Set `devDependencies` to an empty object: |
| 129 | + jq --indent 2 '.devDependencies = {}' ./package.json > ./package.json.tmp |
| 130 | + mv ./package.json.tmp ./package.json |
137 | 131 |
|
138 | 132 | # Remove CLI section: |
139 | 133 | find . -type f -name '*.md' -print0 | xargs -0 perl -0777 -i -pe "s/(\* \* \*\n+)?<section class=\"cli\">[\s\S]+?<\!\-\- \/.cli \-\->//" |
@@ -207,8 +201,8 @@ jobs: |
207 | 201 |
|
208 | 202 | # Publish package to npm: |
209 | 203 | - name: 'Publish package to npm' |
210 | | - # Pin action to full length commit SHA corresponding to v2.2.2 |
211 | | - uses: JS-DevTools/npm-publish@fe72237be0920f7a0cafd6a966c9b929c9466e9b |
| 204 | + # Pin action to full length commit SHA |
| 205 | + uses: JS-DevTools/npm-publish@4b07b26a2f6e0a51846e1870223e545bae91c552 # v3.0.1 |
212 | 206 | with: |
213 | 207 | token: ${{ secrets.NPM_TOKEN }} |
214 | 208 | access: public |
@@ -242,8 +236,8 @@ jobs: |
242 | 236 |
|
243 | 237 | # Cancel any running or queued workflow runs: |
244 | 238 | - name: 'Cancel running or queued workflow runs' |
245 | | - # Pin action to full length commit SHA corresponding to v0.11.0 |
246 | | - uses: styfle/cancel-workflow-action@b173b6ec0100793626c2d9e6b90435061f4fc3e5 |
| 239 | + # Pin action to full length commit SHA |
| 240 | + uses: styfle/cancel-workflow-action@85880fa0301c86cca9da44039ee3bb12d3bedbfa # v0.12.1 |
247 | 241 | with: |
248 | 242 | workflow_id: >- |
249 | 243 | benchmark.yml, |
|
0 commit comments