Lock Our Dependencies

- using latest can lead to unstable behaviour for downstream consumers
mhiew · Mar 21, 2021 · 215ea9e · 215ea9e
1 parent 8c60e19
commit 215ea9e
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 3 deletions.
diff --git a/CHANGELOG.MD b/CHANGELOG.MD
@@ -0,0 +1,13 @@
+Change Log
+==========
+
+Version 2 *(2021-03-21)*
+----------------------------
+**Lock our dependencies to a fixed version so that the action behaviour remains stable.**
+
+ * Set a fixed Node Alpine Version (15.2.0-alpine-3.0.0) and fixed OpenAPI CLI version (1.0.0-beta.38)
+
+Version 1 *(2021-03-20)*
+----------------------------
+
+ * Initial commit using Node Alpine Latest (15.2.0-alpine-3.0.0) and OpenAPI CLI latest (1.0.0-beta.38)
diff --git a/Dockerfile b/Dockerfile
@@ -1,11 +1,11 @@
-FROM node:alpine
+FROM node:15.12.0-alpine3.10
 
 LABEL "com.github.actions.name"="Redocly OpenAPI Lint Github Action"
 LABEL "com.github.actions.description"="Github Action that runs Redocly OpenAPI Lint."
 LABEL "com.github.actions.icon"="box"
 LABEL "com.github.actions.color"="green"
 
-RUN ["npm", "install", "-g", "@redocly/openapi-cli@latest"]
+RUN ["npm", "install", "-g", "@redocly/openapi-cli@1.0.0-beta.38"]
 
 COPY LICENSE README.md /
 

diff --git a/README.md b/README.md
@@ -26,7 +26,7 @@ jobs:
         uses: actions/checkout@v2
 
       - name: openapi-lint 
-        uses: mhiew/redoc-lint-github-action@v1
+        uses: mhiew/redoc-lint-github-action@v2
         with:
           args: 'test/petstore.yml'
 ```