From f3fc0b5ac25d74f6974443027efe7054195e3c9b Mon Sep 17 00:00:00 2001 From: rustdesk Date: Tue, 26 May 2026 18:08:28 +0800 Subject: [PATCH] pin unpinned action --- .github/workflows/flutter-build.yml | 202 ++++++++++++++-------------- 1 file changed, 101 insertions(+), 101 deletions(-) diff --git a/.github/workflows/flutter-build.yml b/.github/workflows/flutter-build.yml index a5f07cbf8..7151fcd65 100644 --- a/.github/workflows/flutter-build.yml +++ b/.github/workflows/flutter-build.yml @@ -81,30 +81,30 @@ jobs: # - { target: aarch64-pc-windows-msvc, os: windows-2022, arch: aarch64 } steps: - name: Export GitHub Actions cache environment variables - uses: actions/github-script@v6 + uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6 with: script: | core.exportVariable('ACTIONS_CACHE_URL', process.env.ACTIONS_CACHE_URL || ''); core.exportVariable('ACTIONS_RUNTIME_TOKEN', process.env.ACTIONS_RUNTIME_TOKEN || ''); - name: Checkout source code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: submodules: recursive - name: Restore bridge files - uses: actions/download-artifact@master + uses: actions/download-artifact@2a5974104b6d5dbdb2f9468a3e54da3bdd241578 # master 2026-05-26 with: name: bridge-artifact path: ./ - name: Install LLVM and Clang - uses: KyleMayes/install-llvm-action@v1 + uses: KyleMayes/install-llvm-action@1a3da29f56261a1e1f937ec88f0856a9b8321d7e # v1 with: version: ${{ env.LLVM_VERSION }} - name: Install flutter - uses: subosito/flutter-action@v2.12.0 #https://github.com/subosito/flutter-action/issues/277 + uses: subosito/flutter-action@2783a3f08e1baf891508463f8c6653c258246225 # v2.12.0; https://github.com/subosito/flutter-action/issues/277 with: channel: "stable" flutter-version: ${{ env.FLUTTER_VERSION }} @@ -126,18 +126,18 @@ jobs: [[ "3.24.5" == ${{env.FLUTTER_VERSION}} ]] && git apply flutter_3.24.4_dropdown_menu_enableFilter.diff - name: Install Rust toolchain - uses: dtolnay/rust-toolchain@v1 + uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # v1 with: toolchain: ${{ env.SCITER_RUST_VERSION }} targets: ${{ matrix.job.target }} components: "rustfmt" - - uses: Swatinem/rust-cache@v2 + - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 with: prefix-key: ${{ matrix.job.os }} - name: Setup vcpkg with Github Actions binary cache - uses: lukka/run-vcpkg@v11 + uses: lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11 with: vcpkgDirectory: C:\vcpkg vcpkgGitCommitId: ${{ env.VCPKG_COMMIT_ID }} @@ -220,7 +220,7 @@ jobs: fi - name: Download RustDeskTempTopMostWindow artifacts - uses: actions/download-artifact@master + uses: actions/download-artifact@2a5974104b6d5dbdb2f9468a3e54da3bdd241578 # master 2026-05-26 if: ${{ inputs.upload-artifact }} with: name: topmostwindow-artifacts @@ -228,7 +228,7 @@ jobs: - name: Upload unsigned if: env.UPLOAD_ARTIFACT == 'true' - uses: actions/upload-artifact@master + uses: actions/upload-artifact@0c366cb4fc8897159c94880f94b55bc716ad6a66 # master 2026-05-26 with: name: rustdesk-unsigned-windows-${{ matrix.job.arch }} path: rustdesk @@ -253,7 +253,7 @@ jobs: mv ./target/release/rustdesk-portable-packer.exe ./SignOutput/rustdesk-${{ env.VERSION }}-${{ matrix.job.arch }}.exe - name: Add MSBuild to PATH - uses: microsoft/setup-msbuild@v2 + uses: microsoft/setup-msbuild@6fb02220983dee41ce7ae257b6f4d8f9bf5ed4ce # v2 - name: Build msi if: env.UPLOAD_ARTIFACT == 'true' @@ -272,7 +272,7 @@ jobs: BASE_URL=${{ env.SIGN_BASE_URL }} SECRET_KEY=${{ secrets.SIGN_SECRET_KEY }} python3 res/job.py sign_files ./SignOutput - name: Publish Release - uses: softprops/action-gh-release@v1 + uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1 if: env.UPLOAD_ARTIFACT == 'true' with: prerelease: true @@ -302,35 +302,35 @@ jobs: # - { target: aarch64-pc-windows-msvc, os: windows-2022 } steps: - name: Export GitHub Actions cache environment variables - uses: actions/github-script@v6 + uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6 with: script: | core.exportVariable('ACTIONS_CACHE_URL', process.env.ACTIONS_CACHE_URL || ''); core.exportVariable('ACTIONS_RUNTIME_TOKEN', process.env.ACTIONS_RUNTIME_TOKEN || ''); - name: Checkout source code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: submodules: recursive - name: Install LLVM and Clang - uses: rustdesk-org/install-llvm-action-32bit@master + uses: rustdesk-org/install-llvm-action-32bit@6aa7d9ad3df84dff01cd4596dd0fc880a7f47fce # master 2026-05-26 with: version: ${{ env.LLVM_VERSION }} - name: Install Rust toolchain - uses: dtolnay/rust-toolchain@v1 + uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # v1 with: toolchain: nightly-2023-10-13-${{ matrix.job.target }} # must use nightly here, because of abi_thiscall feature required targets: ${{ matrix.job.target }} components: "rustfmt" - - uses: Swatinem/rust-cache@v2 + - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 with: prefix-key: ${{ matrix.job.os }}-sciter - name: Setup vcpkg with Github Actions binary cache - uses: lukka/run-vcpkg@v11 + uses: lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11 with: vcpkgDirectory: C:\vcpkg vcpkgGitCommitId: ${{ env.VCPKG_COMMIT_ID }} @@ -395,7 +395,7 @@ jobs: - name: Upload unsigned if: env.UPLOAD_ARTIFACT == 'true' - uses: actions/upload-artifact@master + uses: actions/upload-artifact@0c366cb4fc8897159c94880f94b55bc716ad6a66 # master 2026-05-26 with: name: rustdesk-unsigned-windows-${{ matrix.job.arch }} path: Release @@ -425,7 +425,7 @@ jobs: BASE_URL=${{ env.SIGN_BASE_URL }} SECRET_KEY=${{ secrets.SIGN_SECRET_KEY }} python3 res/job.py sign_files ./SignOutput/ - name: Publish Release - uses: softprops/action-gh-release@v1 + uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1 if: env.UPLOAD_ARTIFACT == 'true' with: prerelease: true @@ -450,7 +450,7 @@ jobs: } steps: - name: Export GitHub Actions cache environment variables - uses: actions/github-script@v6 + uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6 with: script: | core.exportVariable('ACTIONS_CACHE_URL', process.env.ACTIONS_CACHE_URL || ''); @@ -460,12 +460,12 @@ jobs: run: | brew install nasm yasm - name: Checkout source code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: submodules: recursive - name: Install flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: "stable" flutter-version: ${{ env.FLUTTER_VERSION }} @@ -476,7 +476,7 @@ jobs: [[ "3.24.5" == ${{env.FLUTTER_VERSION}} ]] && git apply ${{ github.workspace }}/.github/patches/flutter_3.24.4_dropdown_menu_enableFilter.diff - name: Setup vcpkg with Github Actions binary cache - uses: lukka/run-vcpkg@v11 + uses: lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11 with: vcpkgGitCommitId: ${{ env.VCPKG_COMMIT_ID }} doNotCache: false @@ -500,19 +500,19 @@ jobs: shell: bash - name: Install Rust toolchain - uses: dtolnay/rust-toolchain@v1 + uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # v1 with: toolchain: ${{ env.RUST_VERSION }} targets: ${{ matrix.job.target }} components: "rustfmt" - - uses: Swatinem/rust-cache@v2 + - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 with: prefix-key: rustdesk-lib-cache-ios key: ${{ matrix.job.target }} - name: Restore bridge files - uses: actions/download-artifact@master + uses: actions/download-artifact@2a5974104b6d5dbdb2f9468a3e54da3bdd241578 # master 2026-05-26 with: name: bridge-artifact path: ./ @@ -523,7 +523,7 @@ jobs: cargo build --locked --features flutter,hwcodec --release --target aarch64-apple-ios --lib - name: Upload liblibrustdesk.a Artifacts - uses: actions/upload-artifact@master + uses: actions/upload-artifact@0c366cb4fc8897159c94880f94b55bc716ad6a66 # master 2026-05-26 with: name: liblibrustdesk.a path: target/aarch64-apple-ios/release/liblibrustdesk.a @@ -538,14 +538,14 @@ jobs: # - name: Upload Artifacts # # if: env.ANDROID_SIGNING_KEY != null && env.UPLOAD_ARTIFACT == 'true' - # uses: actions/upload-artifact@master + # uses: actions/upload-artifact@0c366cb4fc8897159c94880f94b55bc716ad6a66 # master 2026-05-26 # with: # name: rustdesk-${{ env.VERSION }}-${{ matrix.job.arch }}.apk # path: flutter/build/ios/ipa/*.ipa # - name: Publish ipa package # # if: env.ANDROID_SIGNING_KEY != null && env.UPLOAD_ARTIFACT == 'true' - # uses: softprops/action-gh-release@v1 + # uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1 # with: # prerelease: true # tag_name: ${{ env.TAG_NAME }} @@ -578,20 +578,20 @@ jobs: } steps: - name: Export GitHub Actions cache environment variables - uses: actions/github-script@v6 + uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6 with: script: | core.exportVariable('ACTIONS_CACHE_URL', process.env.ACTIONS_CACHE_URL || ''); core.exportVariable('ACTIONS_RUNTIME_TOKEN', process.env.ACTIONS_RUNTIME_TOKEN || ''); - name: Checkout source code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: submodules: recursive - name: Import the codesign cert if: env.MACOS_P12_BASE64 != null - uses: apple-actions/import-codesign-certs@v1 + uses: apple-actions/import-codesign-certs@253ddeeac23f2bdad1646faac5c8c2832e800071 # v1 with: p12-file-base64: ${{ secrets.MACOS_P12_BASE64 }} p12-password: ${{ secrets.MACOS_P12_PASSWORD }} @@ -605,7 +605,7 @@ jobs: - name: Import notarize key if: env.MACOS_P12_BASE64 != null - uses: timheuer/base64-to-file@v1.2 + uses: timheuer/base64-to-file@adaa40c0c581f276132199d4cf60afa07ce60eac # v1.2 with: # https://gregoryszorc.com/docs/apple-codesign/stable/apple_codesign_rcodesign.html#notarizing-and-stapling fileName: rustdesk.json @@ -644,7 +644,7 @@ jobs: nasm --version - name: Install flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: "stable" flutter-version: ${{ env.FLUTTER_VERSION }} @@ -663,24 +663,24 @@ jobs: grep -n '_setFramesEnabledState(false);' ../packages/flutter/lib/src/scheduler/binding.dart - name: Install Rust toolchain - uses: dtolnay/rust-toolchain@v1 + uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # v1 with: toolchain: ${{ env.MAC_RUST_VERSION }} targets: ${{ matrix.job.target }} components: "rustfmt" - - uses: Swatinem/rust-cache@v2 + - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 with: prefix-key: ${{ matrix.job.os }} - name: Restore bridge files - uses: actions/download-artifact@master + uses: actions/download-artifact@2a5974104b6d5dbdb2f9468a3e54da3bdd241578 # master 2026-05-26 with: name: bridge-artifact path: ./ - name: Setup vcpkg with Github Actions binary cache - uses: lukka/run-vcpkg@v11 + uses: lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11 with: vcpkgGitCommitId: ${{ env.VCPKG_COMMIT_ID }} doNotCache: false @@ -732,7 +732,7 @@ jobs: - name: Upload unsigned macOS app if: env.UPLOAD_ARTIFACT == 'true' - uses: actions/upload-artifact@master + uses: actions/upload-artifact@0c366cb4fc8897159c94880f94b55bc716ad6a66 # master 2026-05-26 with: name: rustdesk-unsigned-macos-${{ matrix.job.arch }} path: rustdesk-${{ env.VERSION }}-${{ matrix.job.arch }}.dmg # can not upload the directory directly or tar.gz, which destroy the link structure, causing the codesign failed @@ -764,7 +764,7 @@ jobs: - name: Publish DMG package if: env.UPLOAD_ARTIFACT == 'true' - uses: softprops/action-gh-release@v1 + uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1 with: prerelease: true tag_name: ${{ env.TAG_NAME }} @@ -780,25 +780,25 @@ jobs: if: ${{ inputs.upload-artifact }} steps: - name: Download artifacts - uses: actions/download-artifact@master + uses: actions/download-artifact@2a5974104b6d5dbdb2f9468a3e54da3bdd241578 # master 2026-05-26 with: name: rustdesk-unsigned-macos-x86_64 path: ./ - name: Download Artifacts - uses: actions/download-artifact@master + uses: actions/download-artifact@2a5974104b6d5dbdb2f9468a3e54da3bdd241578 # master 2026-05-26 with: name: rustdesk-unsigned-macos-aarch64 path: ./ - name: Download Artifacts - uses: actions/download-artifact@master + uses: actions/download-artifact@2a5974104b6d5dbdb2f9468a3e54da3bdd241578 # master 2026-05-26 with: name: rustdesk-unsigned-windows-x86_64 path: ./windows-x86_64/ - name: Download Artifacts - uses: actions/download-artifact@master + uses: actions/download-artifact@2a5974104b6d5dbdb2f9468a3e54da3bdd241578 # master 2026-05-26 with: name: rustdesk-unsigned-windows-x86 path: ./windows-x86/ @@ -808,7 +808,7 @@ jobs: tar czf rustdesk-${{ env.VERSION }}-unsigned.tar.gz *.dmg windows-x86_64 windows-x86 - name: Publish unsigned app - uses: softprops/action-gh-release@v1 + uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1 with: prerelease: true tag_name: ${{ env.TAG_NAME }} @@ -845,7 +845,7 @@ jobs: } steps: - name: Free Disk Space (Ubuntu) - uses: jlumbroso/free-disk-space@main + uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # main 2026-05-26 with: tool-cache: false android: false @@ -856,7 +856,7 @@ jobs: swap-storage: false - name: Export GitHub Actions cache environment variables - uses: actions/github-script@v6 + uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6 with: script: | core.exportVariable('ACTIONS_CACHE_URL', process.env.ACTIONS_CACHE_URL || ''); @@ -898,12 +898,12 @@ jobs: wget - name: Checkout source code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: submodules: recursive - name: Install flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: "stable" flutter-version: ${{ env.ANDROID_FLUTTER_VERSION }} @@ -913,14 +913,14 @@ jobs: cd $(dirname $(dirname $(which flutter))) [[ "3.24.5" == ${{env.ANDROID_FLUTTER_VERSION}} ]] && git apply ${{ github.workspace }}/.github/patches/flutter_3.24.4_dropdown_menu_enableFilter.diff - - uses: nttld/setup-ndk@v1 + - uses: nttld/setup-ndk@ed92fe6cadad69be94a966a7ee3271275e62f779 # v1 id: setup-ndk with: ndk-version: ${{ env.NDK_VERSION }} add-to-path: true - name: Setup vcpkg with Github Actions binary cache - uses: lukka/run-vcpkg@v11 + uses: lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11 with: vcpkgDirectory: /opt/artifacts/vcpkg vcpkgGitCommitId: ${{ env.VCPKG_COMMIT_ID }} @@ -955,18 +955,18 @@ jobs: shell: bash - name: Restore bridge files - uses: actions/download-artifact@master + uses: actions/download-artifact@2a5974104b6d5dbdb2f9468a3e54da3bdd241578 # master 2026-05-26 with: name: bridge-artifact path: ./ - name: Install Rust toolchain - uses: dtolnay/rust-toolchain@v1 + uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # v1 with: toolchain: ${{ env.RUST_VERSION }} components: "rustfmt" - - uses: Swatinem/rust-cache@v2 + - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 with: prefix-key: rustdesk-lib-cache-android # TODO: drop '-android' part after caches are invalidated key: ${{ matrix.job.target }} @@ -1002,7 +1002,7 @@ jobs: esac - name: Upload Rustdesk library to Artifacts - uses: actions/upload-artifact@master + uses: actions/upload-artifact@0c366cb4fc8897159c94880f94b55bc716ad6a66 # master 2026-05-26 with: name: librustdesk.so.${{ matrix.job.target }} path: ./target/${{ matrix.job.target }}/release/liblibrustdesk.so @@ -1067,7 +1067,7 @@ jobs: echo "ANDROID_SIGN_TOOL_VERSION=$BUILD_TOOL_VERSION" >> $GITHUB_ENV echo Last build tool version is: $BUILD_TOOL_VERSION - - uses: r0adkll/sign-android-release@v1 + - uses: r0adkll/sign-android-release@349ebdef58775b1e0d8099458af0816dc79b6407 # v1 name: Sign app APK if: env.ANDROID_SIGNING_KEY != null id: sign-rustdesk @@ -1083,14 +1083,14 @@ jobs: - name: Upload Artifacts if: env.ANDROID_SIGNING_KEY != null && env.UPLOAD_ARTIFACT == 'true' - uses: actions/upload-artifact@master + uses: actions/upload-artifact@0c366cb4fc8897159c94880f94b55bc716ad6a66 # master 2026-05-26 with: name: rustdesk-${{ env.VERSION }}-${{ matrix.job.arch }}.apk path: ${{steps.sign-rustdesk.outputs.signedReleaseFile}} - name: Publish signed apk package if: env.ANDROID_SIGNING_KEY != null && env.UPLOAD_ARTIFACT == 'true' - uses: softprops/action-gh-release@v1 + uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1 with: prerelease: true tag_name: ${{ env.TAG_NAME }} @@ -1099,7 +1099,7 @@ jobs: - name: Publish unsigned apk package if: env.ANDROID_SIGNING_KEY == null && env.UPLOAD_ARTIFACT == 'true' - uses: softprops/action-gh-release@v1 + uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1 with: prerelease: true tag_name: ${{ env.TAG_NAME }} @@ -1117,7 +1117,7 @@ jobs: suffix: "" steps: - name: Free Disk Space (Ubuntu) - uses: jlumbroso/free-disk-space@main + uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # main 2026-05-26 with: tool-cache: false android: false @@ -1128,7 +1128,7 @@ jobs: swap-storage: false - name: Export GitHub Actions cache environment variables - uses: actions/github-script@v6 + uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6 with: script: | core.exportVariable('ACTIONS_CACHE_URL', process.env.ACTIONS_CACHE_URL || ''); @@ -1170,12 +1170,12 @@ jobs: wget - name: Checkout source code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: submodules: recursive - name: Install flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: "stable" flutter-version: ${{ env.ANDROID_FLUTTER_VERSION }} @@ -1186,32 +1186,32 @@ jobs: [[ "3.24.5" == ${{env.ANDROID_FLUTTER_VERSION}} ]] && git apply ${{ github.workspace }}/.github/patches/flutter_3.24.4_dropdown_menu_enableFilter.diff - name: Restore bridge files - uses: actions/download-artifact@master + uses: actions/download-artifact@2a5974104b6d5dbdb2f9468a3e54da3bdd241578 # master 2026-05-26 with: name: bridge-artifact path: ./ - name: Download Rustdesk library from Artifacts - uses: actions/download-artifact@master + uses: actions/download-artifact@2a5974104b6d5dbdb2f9468a3e54da3bdd241578 # master 2026-05-26 with: name: librustdesk.so.aarch64-linux-android path: ./flutter/android/app/src/main/jniLibs/arm64-v8a - name: Download Rustdesk library from Artifacts - uses: actions/download-artifact@master + uses: actions/download-artifact@2a5974104b6d5dbdb2f9468a3e54da3bdd241578 # master 2026-05-26 with: name: librustdesk.so.armv7-linux-androideabi path: ./flutter/android/app/src/main/jniLibs/armeabi-v7a - name: Download Rustdesk library from Artifacts - uses: actions/download-artifact@master + uses: actions/download-artifact@2a5974104b6d5dbdb2f9468a3e54da3bdd241578 # master 2026-05-26 with: name: librustdesk.so.x86_64-linux-android path: ./flutter/android/app/src/main/jniLibs/x86_64 - name: Download Rustdesk library from Artifacts if: ${{ env.reltype == 'debug' }} - uses: actions/download-artifact@master + uses: actions/download-artifact@2a5974104b6d5dbdb2f9468a3e54da3bdd241578 # master 2026-05-26 with: name: librustdesk.so.i686-linux-android path: ./flutter/android/app/src/main/jniLibs/x86 @@ -1251,7 +1251,7 @@ jobs: echo "ANDROID_SIGN_TOOL_VERSION=$BUILD_TOOL_VERSION" >> $GITHUB_ENV echo Last build tool version is: $BUILD_TOOL_VERSION - - uses: r0adkll/sign-android-release@v1 + - uses: r0adkll/sign-android-release@349ebdef58775b1e0d8099458af0816dc79b6407 # v1 name: Sign app APK if: env.ANDROID_SIGNING_KEY != null id: sign-rustdesk @@ -1267,14 +1267,14 @@ jobs: - name: Upload Artifacts if: env.ANDROID_SIGNING_KEY != null && env.UPLOAD_ARTIFACT == 'true' - uses: actions/upload-artifact@master + uses: actions/upload-artifact@0c366cb4fc8897159c94880f94b55bc716ad6a66 # master 2026-05-26 with: name: rustdesk-${{ env.VERSION }}-${{ matrix.job.arch }}.apk path: ${{steps.sign-rustdesk.outputs.signedReleaseFile}} - name: Publish signed apk package if: env.ANDROID_SIGNING_KEY != null && env.UPLOAD_ARTIFACT == 'true' - uses: softprops/action-gh-release@v1 + uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1 with: prerelease: true tag_name: ${{ env.TAG_NAME }} @@ -1283,7 +1283,7 @@ jobs: - name: Publish unsigned apk package if: env.ANDROID_SIGNING_KEY == null && env.UPLOAD_ARTIFACT == 'true' - uses: softprops/action-gh-release@v1 + uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1 with: prerelease: true tag_name: ${{ env.TAG_NAME }} @@ -1317,7 +1317,7 @@ jobs: } steps: - name: Export GitHub Actions cache environment variables - uses: actions/github-script@v6 + uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6 with: script: | core.exportVariable('ACTIONS_CACHE_URL', process.env.ACTIONS_CACHE_URL || ''); @@ -1335,13 +1335,13 @@ jobs: fi - name: Checkout source code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: submodules: recursive - name: Set Swap Space if: ${{ matrix.job.arch == 'x86_64' }} - uses: pierotofy/set-swap-space@master + uses: pierotofy/set-swap-space@fc79b3f67fa8a838184ce84a674ca12238d2c761 # master 2026-05-26 with: swap-size-gb: 12 @@ -1351,7 +1351,7 @@ jobs: free -m - name: Install Rust toolchain - uses: dtolnay/rust-toolchain@v1 + uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # v1 if: matrix.job.arch == 'x86_64' || env.UPLOAD_ARTIFACT == 'true' with: toolchain: ${{ env.RUST_VERSION }} @@ -1370,14 +1370,14 @@ jobs: - name: Restore bridge files if: matrix.job.arch == 'x86_64' || env.UPLOAD_ARTIFACT == 'true' - uses: actions/download-artifact@master + uses: actions/download-artifact@2a5974104b6d5dbdb2f9468a3e54da3bdd241578 # master 2026-05-26 with: name: bridge-artifact path: ./ - name: Setup vcpkg with Github Actions binary cache if: matrix.job.arch == 'x86_64' || env.UPLOAD_ARTIFACT == 'true' - uses: lukka/run-vcpkg@v11 + uses: lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11 with: vcpkgDirectory: /opt/artifacts/vcpkg vcpkgGitCommitId: ${{ env.VCPKG_COMMIT_ID }} @@ -1405,12 +1405,12 @@ jobs: - name: Restore bridge files if: matrix.job.arch == 'x86_64' || env.UPLOAD_ARTIFACT == 'true' - uses: actions/download-artifact@master + uses: actions/download-artifact@2a5974104b6d5dbdb2f9468a3e54da3bdd241578 # master 2026-05-26 with: name: bridge-artifact path: ./ - - uses: rustdesk-org/run-on-arch-action@amd64-support + - uses: rustdesk-org/run-on-arch-action@d3fcfbb632b84cf7f6bc772bfaaa2c2f4f8789a8 # amd64-support 2026-05-26 name: Build rustdesk id: vcpkg if: matrix.job.arch == 'x86_64' || env.UPLOAD_ARTIFACT == 'true' @@ -1584,7 +1584,7 @@ jobs: - name: Publish debian/rpm package if: env.UPLOAD_ARTIFACT == 'true' - uses: softprops/action-gh-release@v1 + uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1 with: prerelease: true tag_name: ${{ env.TAG_NAME }} @@ -1593,7 +1593,7 @@ jobs: rustdesk-*.rpm - name: Upload deb - uses: actions/upload-artifact@master + uses: actions/upload-artifact@0c366cb4fc8897159c94880f94b55bc716ad6a66 # master 2026-05-26 if: env.UPLOAD_ARTIFACT == 'true' with: name: rustdesk-${{ env.VERSION }}-${{ matrix.job.arch }}.deb @@ -1612,7 +1612,7 @@ jobs: - name: Build archlinux package if: matrix.job.arch == 'x86_64' && env.UPLOAD_ARTIFACT == 'true' - uses: rustdesk-org/arch-makepkg-action@master + uses: rustdesk-org/arch-makepkg-action@04200739ed1d0bf6f2188b6736b26a767c57a7f9 # master 2026-05-26 with: packages: scripts: | @@ -1620,7 +1620,7 @@ jobs: - name: Publish archlinux package if: matrix.job.arch == 'x86_64' && env.UPLOAD_ARTIFACT == 'true' - uses: softprops/action-gh-release@v1 + uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1 with: prerelease: true tag_name: ${{ env.TAG_NAME }} @@ -1658,14 +1658,14 @@ jobs: } steps: - name: Export GitHub Actions cache environment variables - uses: actions/github-script@v6 + uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6 with: script: | core.exportVariable('ACTIONS_CACHE_URL', process.env.ACTIONS_CACHE_URL || ''); core.exportVariable('ACTIONS_RUNTIME_TOKEN', process.env.ACTIONS_RUNTIME_TOKEN || ''); - name: Checkout source code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: submodules: recursive @@ -1683,7 +1683,7 @@ jobs: free -m - name: Install Rust toolchain - uses: dtolnay/rust-toolchain@v1 + uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # v1 with: toolchain: ${{ env.SCITER_RUST_VERSION }} targets: ${{ matrix.job.target }} @@ -1694,7 +1694,7 @@ jobs: RUST_TOOLCHAIN_VERSION=$(cargo --version | awk '{print $2}') echo "RUST_TOOLCHAIN_VERSION=$RUST_TOOLCHAIN_VERSION" >> $GITHUB_ENV - - uses: rustdesk-org/run-on-arch-action@amd64-support + - uses: rustdesk-org/run-on-arch-action@d3fcfbb632b84cf7f6bc772bfaaa2c2f4f8789a8 # amd64-support 2026-05-26 name: Build rustdesk sciter binary for ${{ matrix.job.arch }} id: vcpkg with: @@ -1840,7 +1840,7 @@ jobs: - name: Publish debian package if: env.UPLOAD_ARTIFACT == 'true' - uses: softprops/action-gh-release@v1 + uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1 with: prerelease: true tag_name: ${{ env.TAG_NAME }} @@ -1848,7 +1848,7 @@ jobs: rustdesk-${{ env.VERSION }}-${{ matrix.job.arch }}-sciter.deb - name: Upload deb - uses: actions/upload-artifact@master + uses: actions/upload-artifact@0c366cb4fc8897159c94880f94b55bc716ad6a66 # master 2026-05-26 if: env.UPLOAD_ARTIFACT == 'true' with: name: rustdesk-${{ env.VERSION }}-${{ matrix.job.arch }}-sciter.deb @@ -1867,12 +1867,12 @@ jobs: - { target: aarch64-unknown-linux-gnu, arch: aarch64 } steps: - name: Checkout source code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: submodules: recursive - name: Download Binary - uses: actions/download-artifact@master + uses: actions/download-artifact@2a5974104b6d5dbdb2f9468a3e54da3bdd241578 # master 2026-05-26 with: name: rustdesk-${{ env.VERSION }}-${{ matrix.job.arch }}.deb path: . @@ -1897,7 +1897,7 @@ jobs: - name: Publish appimage package if: env.UPLOAD_ARTIFACT == 'true' - uses: softprops/action-gh-release@v1 + uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1 with: prerelease: true tag_name: ${{ env.TAG_NAME }} @@ -1940,12 +1940,12 @@ jobs: } steps: - name: Checkout source code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: submodules: recursive - name: Download Binary - uses: actions/download-artifact@master + uses: actions/download-artifact@2a5974104b6d5dbdb2f9468a3e54da3bdd241578 # master 2026-05-26 with: name: rustdesk-${{ env.VERSION }}-${{ matrix.job.arch }}${{ matrix.job.suffix }}.deb path: . @@ -1954,7 +1954,7 @@ jobs: run: | mv rustdesk-${{ env.VERSION }}-${{ matrix.job.arch }}${{ matrix.job.suffix }}.deb flatpak/rustdesk.deb - - uses: rustdesk-org/run-on-arch-action@amd64-support + - uses: rustdesk-org/run-on-arch-action@d3fcfbb632b84cf7f6bc772bfaaa2c2f4f8789a8 # amd64-support 2026-05-26 name: Build rustdesk flatpak package for ${{ matrix.job.arch }} id: flatpak with: @@ -1982,7 +1982,7 @@ jobs: flatpak build-bundle ./repo rustdesk-${{ env.VERSION }}-${{ matrix.job.arch }}${{ matrix.job.suffix }}.flatpak com.rustdesk.RustDesk - name: Publish flatpak package - uses: softprops/action-gh-release@v1 + uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1 with: prerelease: true tag_name: ${{ env.TAG_NAME }} @@ -2001,7 +2001,7 @@ jobs: RELEASE_NAME: web-basic steps: - name: Checkout source code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: submodules: recursive @@ -2011,7 +2011,7 @@ jobs: sudo apt-get install -y wget npm - name: Install flutter - uses: subosito/flutter-action@v2.12.0 #https://github.com/subosito/flutter-action/issues/277 + uses: subosito/flutter-action@2783a3f08e1baf891508463f8c6653c258246225 # v2.12.0; https://github.com/subosito/flutter-action/issues/277 with: channel: "stable" flutter-version: ${{ env.FLUTTER_VERSION }} @@ -2055,7 +2055,7 @@ jobs: - name: Publish web if: env.UPLOAD_ARTIFACT == 'true' - uses: softprops/action-gh-release@v1 + uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1 with: prerelease: true tag_name: ${{ env.TAG_NAME }}