From ea3b0a2835945233bbdeb837034eef46ab4301c7 Mon Sep 17 00:00:00 2001
From: PJ Reiniger <pj.reiniger@gmail.com>
Date: Mon, 29 Apr 2024 02:06:32 -0400
Subject: [PATCH] Lock down actions versions

---
 .github/workflows/build.yml   | 14 +++++++-------
 .github/workflows/lint.yml    |  8 ++++----
 .github/workflows/publish.yml |  2 +-
 3 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 35694da..d5d8754 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -12,19 +12,19 @@ jobs:
       matrix:
         include:
         # Build standard, native
-        - { name: "windows - native",        os: windows-2019, command: "build",  config: "--config=windows", bazel_options: "", }
-        - { name: "ubuntu  - native",        os: ubuntu-latest,  command: "build",  config: "--config=linux",   bazel_options: "", }
-        - { name: "macos   - native",        os: macos-latest,   command: "build",  config: "--config=macos",   bazel_options: "", }
+        - { name: "windows - native",        os: windows-2022,  command: "build",  config: "--config=windows", bazel_options: "", }
+        - { name: "ubuntu  - native",        os: ubuntu-22.04,  command: "build",  config: "--config=linux",   bazel_options: "", }
+        - { name: "macos   - native",        os: macos-12,      command: "build",  config: "--config=macos",   bazel_options: "", }
 
         # Build bzlmod, native
-        - { name: "windows - bzlmod native", os: windows-2019, command: "build",  config: "--enable_bzlmod --config=windows", bazel_options: "", }
-        - { name: "ubuntu  - bzlmod native", os: ubuntu-latest,  command: "build",  config: "--enable_bzlmod --config=linux",   bazel_options: "", }
-        - { name: "macos   - bzlmod native", os: macos-latest,   command: "build",  config: "--enable_bzlmod --config=macos",   bazel_options: "", }
+        - { name: "windows - bzlmod native", os: windows-2022,  command: "build",  config: "--enable_bzlmod --config=windows", bazel_options: "", }
+        - { name: "ubuntu  - bzlmod native", os: ubuntu-22.04,  command: "build",  config: "--enable_bzlmod --config=linux",   bazel_options: "", }
+        - { name: "macos   - bzlmod native", os: macos-12,      command: "build",  config: "--enable_bzlmod --config=macos",   bazel_options: "", }
 
     name: "Build - ${{ matrix.name }}"
     runs-on: ${{ matrix.os }}
     steps:
     - uses: actions/checkout@v4
     - uses: actions/setup-python@v4
-      with: { python-version: '3.10.8' }
+      with: { python-version: '3.11' }
     - run: bazel ${{ matrix.command }} //... -k ${{ matrix.config }} --config=remote --verbose_failures
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 02c816a..88570d1 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -4,13 +4,13 @@ on: [pull_request, push]
 
 jobs:
   lint_python:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4
       - uses: psf/black@stable
   wpiformat:
     name: "wpiformat"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4
         with:
@@ -20,7 +20,7 @@ jobs:
             git branch -f main origin/main
         if: github.ref != 'refs/heads/main'
       - uses: actions/setup-python@v4
-        with: { python-version: '3.10.8' }
+        with: { python-version: '3.11' }
       - name: Install clang-format
         run: |
           wget -O - https://apt.llvm.org/llvm-snapshot.gpg.key | sudo apt-key add -
@@ -34,7 +34,7 @@ jobs:
         run: git --no-pager diff --exit-code HEAD
   buildifier:
     name: "buildifier"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: Set up Go 1.20.x
         uses: actions/setup-go@v4
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 965c0fa..6a7bc87 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -12,7 +12,7 @@ concurrency:
 jobs:
   publish_module:
     name: "Publish Module"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
     # Checkout repository
     - uses: actions/checkout@v4