From 3e580a9f58508c619052f0e5194b7b029ebedce8 Mon Sep 17 00:00:00 2001 From: homksei Date: Wed, 3 Jul 2024 09:46:08 +0200 Subject: [PATCH] chore: pin some dependencies by hash * Update `github-action-renovate-config-validator` action to specific commit hash * Specify Miniconda version and add checksum verification in `onedal-dev.Dockerfile` --- .github/workflows/renovate-validation.yml | 2 +- dev/docker/onedal-dev.Dockerfile | 5 ++++- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/workflows/renovate-validation.yml b/.github/workflows/renovate-validation.yml index 83825305388..4b6077d0b69 100644 --- a/.github/workflows/renovate-validation.yml +++ b/.github/workflows/renovate-validation.yml @@ -25,6 +25,6 @@ jobs: - name: Checkout uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 - name: Validate - uses: suzuki-shunsuke/github-action-renovate-config-validator@v1.0.1 + uses: suzuki-shunsuke/github-action-renovate-config-validator@b54483862375f51910a60c4f498e927d4f3df466 # v1.0.1 with: config_file_path: .github/renovate.json diff --git a/dev/docker/onedal-dev.Dockerfile b/dev/docker/onedal-dev.Dockerfile index 6864323429d..995702445a5 100644 --- a/dev/docker/onedal-dev.Dockerfile +++ b/dev/docker/onedal-dev.Dockerfile @@ -17,6 +17,7 @@ FROM ubuntu:22.04@sha256:590f59cd1a88bebe6293510a76b28a92a28782f483a1ec1f69ccbc716735b796 ARG workdirectory="/sources/oneDAL" +ARG miniconda_version="py312_24.5.0-0" COPY . ${workdirectory} @@ -28,7 +29,9 @@ RUN apt-get update && \ # Install miniconda ENV CONDA_DIR /opt/conda -RUN wget --quiet https://repo.anaconda.com/miniconda/Miniconda3-latest-Linux-x86_64.sh -O ~/miniconda.sh && \ + +RUN wget --quiet https://repo.anaconda.com/miniconda/Miniconda3-${miniconda_version}-Linux-x86_64.sh -O ~/miniconda.sh && \ + echo "4b3b3b1b99215e85fd73fb2c2d7ebf318ac942a457072de62d885056556eb83e ~/miniconda.sh" | sha256sum -c - && \ /bin/bash ~/miniconda.sh -b -p /opt/conda # Put conda in path to use conda activate