Update CI

.github/workflows/docker-build.yml

@@ -3,8 +3,10 @@ name: Build & Check
 on:
   pull_request:
     types:
+      - opened
       - labeled
       - edited
+      - reopened
       - synchronize
       - unlabeled
     branches:
@@ -23,8 +25,8 @@ jobs:
     runs-on: ubuntu-latest
     continue-on-error: true
     steps:
-      - uses: actions/setup-node@v6
-      - uses: actions/checkout@v6
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # 48b55a0 (https://github.com/actions/setup-node/releases/tag/v6.4.0)
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # df4cb1c (https://github.com/actions/checkout/releases/tag/v6.0.3)
       - run: npx -y prettier --check ./
       # Uncomment the line below to include shell script linting
       # - run: npx -y shellcheck ./.github/scripts/*.sh ./src/scripts/*.sh
@@ -42,10 +44,10 @@ jobs:
 
   build_rust:
     name: Build Rust
-    uses: mbround18/gh-reusable/.github/workflows/rust-build-n-test.yml@main
+    uses: mbround18/gh-reusable/.github/workflows/rust-build-n-test.yaml@main
 
   build_docker:
-    name: "Build Docker"
+    name: Build Docker (${{ matrix.image }})
     runs-on: ubuntu-latest
     strategy:
       fail-fast: true
@@ -57,20 +59,20 @@ jobs:
           - image: valheim
             push: ${{ contains(github.event.pull_request.labels.*.name, 'canary') }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # df4cb1c (https://github.com/actions/checkout/releases/tag/v6.0.3)
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # d7f5e7f (https://github.com/docker/setup-buildx-action/releases/tag/v4.1.0)
 
       - name: Login to DockerHub
-        uses: docker/login-action@v4
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # 650006c (https://github.com/docker/login-action/releases/tag/v4.2.0)
         with:
           username: mbround18
           password: ${{ secrets.DOCKER_TOKEN }}
 
       - name: Docker meta
         id: meta
-        uses: crazy-max/ghaction-docker-meta@v6
+        uses: crazy-max/ghaction-docker-meta@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # 80c7e94 (https://github.com/crazy-max/ghaction-docker-meta/releases/tag/v6.1.0)
         with:
           images: |
             mbround18/${{ matrix.image }}
@@ -79,7 +81,7 @@ jobs:
 
       - name: Build ${{ matrix.image }}
         id: docker_build
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # f9f3042 (https://github.com/docker/build-push-action/releases/tag/v7.2.0)
         with:
           file: ./Dockerfile
           target: ${{ matrix.image }}

.github/workflows/docker-release.yml

@@ -18,12 +18,10 @@ jobs:
 
     steps:
       # Check out the repository
-      - uses: actions/checkout@v6
-
-      # Generate Docker metadata
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # df4cb1c (https://github.com/actions/checkout/releases/tag/v6.0.3)
       - name: Docker meta
         id: meta
-        uses: crazy-max/ghaction-docker-meta@v6
+        uses: crazy-max/ghaction-docker-meta@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # 80c7e94 (https://github.com/crazy-max/ghaction-docker-meta/releases/tag/v6.1.0)
         with:
           images: |
             mbround18/${{ matrix.image }}
@@ -39,19 +37,17 @@ jobs:
 
       # Set up Docker Buildx
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
-
-      # Log in to DockerHub
+        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # d7f5e7f (https://github.com/docker/setup-buildx-action/releases/tag/v4.1.0)
       - name: Login to DockerHub
-        uses: docker/login-action@v4
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # 650006c (https://github.com/docker/login-action/releases/tag/v4.2.0)
         with:
           username: mbround18
           password: ${{ secrets.DOCKER_TOKEN }}
 
       # Log in to GitHub Container Registry
       - name: Login to GitHub Container Registry
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v4
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # 650006c (https://github.com/docker/login-action/releases/tag/v4.2.0)
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -63,7 +59,7 @@ jobs:
 
       # Build and push Docker images
       - name: Build and push
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # f9f3042 (https://github.com/docker/build-push-action/releases/tag/v7.2.0)
         with:
           context: .
           file: ./Dockerfile

.github/workflows/enforce-labels.yml

@@ -12,7 +12,7 @@ jobs:
   enforce-label:
     runs-on: ubuntu-latest
     steps:
-      - uses: yogevbd/enforce-label-action@2.2.2
+      - uses: yogevbd/enforce-label-action@a3c219da6b8fa73f6ba62b68ff09c469b3a1c024 # a3c219d (https://github.com/yogevbd/enforce-label-action/releases/tag/2.2.2)
         with:
           REQUIRED_LABELS_ANY: "major,minor,patch,internal,performance,question,release,tests,wontfix,documentation,bug,dependencies"
           REQUIRED_LABELS_ANY_DESCRIPTION: "Select at least one label ['major','minr','patch', 'documentation']"

.github/workflows/release.yml

@@ -16,20 +16,20 @@ jobs:
     if: "!contains(github.event.head_commit.message, 'ci skip') && !contains(github.event.head_commit.message, 'skip ci')"
     steps:
       # Check out the repository
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # df4cb1c (https://github.com/actions/checkout/releases/tag/v6.0.3)
         with:
           fetch-depth: 0
           token: "${{ secrets.GH_TOKEN }}"
 
       # Set up Rust with the stable toolchain
       - name: Setup | Rust | Stable
-        uses: actions-rust-lang/setup-rust-toolchain@v1
+        uses: actions-rust-lang/setup-rust-toolchain@46268bd060767258de96ed93c1251119784f2ab6 # 46268bd (https://github.com/actions-rust-lang/setup-rust-toolchain/releases/tag/v1.16.1)
         with:
           toolchain: stable
           components: clippy rustfmt
 
       # Cache Cargo build files to speed up builds
-      - uses: actions/cache@v5
+      - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # 27d5ce7 (https://github.com/actions/cache/releases/tag/v5.0.5)
         name: Cache Cargo Files
         with:
           path: |
@@ -42,13 +42,13 @@ jobs:
         run: make release PROFILE=production
 
       # Create a ZIP archive of the release binaries
-      - uses: vimtor/action-zip@v1
+      - uses: vimtor/action-zip@5407800dfb2b1b37d48df912330cb22f4ab6f422 # 5407800 (https://github.com/vimtor/action-zip/releases/tag/v1.3)
         with:
           files: target/release/odin target/release/huginn
           dest: tmp/bundle.zip
 
       # Use the Auto Release Tool by Intuit
       - name: Auto Release Tool by Intuit
-        uses: mbround18/auto@v1.5.0
+        uses: mbround18/auto@52c63af059a94fee4575f83bfc6ea0f35866b3b8 # 52c63af (https://github.com/mbround18/auto/releases/tag/v1.5.0)
         with:
           token: ${{ secrets.GH_TOKEN }}