From a8be1296b0a9583204b1f051dd3c2ebafc3b8eb4 Mon Sep 17 00:00:00 2001 From: Matti Schneider Date: Wed, 26 Nov 2025 10:15:25 +0700 Subject: [PATCH] Upgrade and pin Actions dependencies Restore content following a security incident At this stage, it might be a supply chain compromise. This changeset will at least rebuild and re-publish the website and provides some basic safety in the case it was indeed supply chain. --- .github/workflows/gh-pages.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/gh-pages.yml b/.github/workflows/gh-pages.yml index 22df6489..3d9d05b7 100644 --- a/.github/workflows/gh-pages.yml +++ b/.github/workflows/gh-pages.yml @@ -28,7 +28,7 @@ jobs: run: npm ci - name: Set Hugo up - uses: peaceiris/actions-hugo@v2 + uses: peaceiris/actions-hugo@75d2e84710de30f6ff7268e08f310b60ef14033f with: hugo-version: '0.147.1' extended: true # Prevent error building site: POSTCSS: failed to transform, see https://gohugo.io/troubleshooting/faq/#i-get-this-feature-is-not-available-in-your-current-hugo-version @@ -52,7 +52,7 @@ jobs: find . -print - name: Deploy ./public directory to the remote gh-pages branch - uses: peaceiris/actions-gh-pages@v3 + uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e with: github_token: ${{ secrets.GITHUB_TOKEN }} cname: docs.opentermsarchive.org