grain-lang · ospencer · Feb 16, 2025 · Feb 16, 2025 · Mar 4, 2025 · Mar 4, 2025
diff --git a/.github/workflows/esy.yml b/.github/workflows/esy.yml
@@ -29,7 +29,7 @@ jobs:
       # It also adds `shx` globally for cross-platform shell commands
       - name: Setup environment
         run: |
-          npm i -g esy
+          npm i -g esy@0.8.0
           npm i -g shx
 
       - name: Checkout project
@@ -43,7 +43,7 @@ jobs:
 
       - name: Esy cache
         id: esy-cache
-        uses: actions/cache@v3.3.1
+        uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
         with:
           path: _export
           key: ${{ runner.os }}-esy-${{ hashFiles('esy.lock/index.json') }}

diff --git a/.github/workflows/opam.yml b/.github/workflows/opam.yml
@@ -26,7 +26,7 @@ jobs:
           submodules: "recursive"
 
       - name: Setup OCaml ${{ matrix.ocaml-compiler }}
-        uses: ocaml/setup-ocaml@v2
+        uses: ocaml/setup-ocaml@0b8b8c6f352bfdd12fa56b6727eed5990aa22859 # v3.2.10
         if: ${{ startsWith(matrix.os, 'windows-') }}
         with:
           ocaml-compiler: ${{ matrix.ocaml-compiler }}
@@ -35,7 +35,7 @@ jobs:
             default: https://github.com/ocaml/opam-repository.git
 
       - name: Setup OCaml ${{ matrix.ocaml-compiler }}
-        uses: ocaml/setup-ocaml@v2
+        uses: ocaml/setup-ocaml@0b8b8c6f352bfdd12fa56b6727eed5990aa22859 # v3.2.10
         if: ${{ !startsWith(matrix.os, 'windows-') }}
         with:
           ocaml-compiler: ${{ matrix.ocaml-compiler }}

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -84,7 +84,7 @@ jobs:
           echo -n "$CHANGES" > CHANGES.md
 
       - name: Setup OCaml
-        uses: ocaml/setup-ocaml@v2
+        uses: ocaml/setup-ocaml@0b8b8c6f352bfdd12fa56b6727eed5990aa22859 # v3.2.10
         with:
           ocaml-compiler: 4.14.0
 

diff --git a/esy.lock/index.json b/esy.lock/index.json
diff --git a/esy.lock/opam/astring.0.8.5/opam b/esy.lock/opam/astring.0.8.5/opam
diff --git a/esy.lock/opam/base-bytes.base/opam b/esy.lock/opam/base-bytes.base/opam
diff --git a/esy.lock/opam/base.v0.16.3/opam b/esy.lock/opam/base.v0.16.3/opam
diff --git a/esy.lock/opam/camlp-streams.5.0.1/opam b/esy.lock/opam/camlp-streams.5.0.1/opam
diff --git a/esy.lock/opam/chrome-trace.3.11.1/opam → esy.lock/opam/chrome-trace.3.17.2/opam b/esy.lock/opam/chrome-trace.3.11.1/opam → esy.lock/opam/chrome-trace.3.17.2/opam
diff --git a/esy.lock/opam/cmdliner.1.2.0/opam → esy.lock/opam/cmdliner.1.3.0/opam b/esy.lock/opam/cmdliner.1.2.0/opam → esy.lock/opam/cmdliner.1.3.0/opam
diff --git a/esy.lock/opam/conf-bash.1/opam b/esy.lock/opam/conf-bash.1/opam
diff --git a/esy.lock/opam/cppo.1.6.9/opam b/esy.lock/opam/cppo.1.6.9/opam
diff --git a/esy.lock/opam/dune-build-info.3.11.1/opam → esy.lock/opam/dune-build-info.3.17.2/opam b/esy.lock/opam/dune-build-info.3.11.1/opam → esy.lock/opam/dune-build-info.3.17.2/opam
diff --git a/esy.lock/opam/dune-configurator.3.11.1/opam → esy.lock/opam/dune-configurator.3.17.2/opam b/esy.lock/opam/dune-configurator.3.11.1/opam → esy.lock/opam/dune-configurator.3.17.2/opam
diff --git a/esy.lock/opam/dune-rpc.3.11.1/opam → esy.lock/opam/dune-rpc.3.17.2/opam b/esy.lock/opam/dune-rpc.3.11.1/opam → esy.lock/opam/dune-rpc.3.17.2/opam
diff --git a/esy.lock/opam/dune.3.11.1/opam → esy.lock/opam/dune.3.17.2/opam b/esy.lock/opam/dune.3.11.1/opam → esy.lock/opam/dune.3.17.2/opam
diff --git a/esy.lock/opam/dyn.3.11.1/opam → esy.lock/opam/dyn.3.17.2/opam b/esy.lock/opam/dyn.3.11.1/opam → esy.lock/opam/dyn.3.17.2/opam
diff --git a/esy.lock/opam/either.1.0.0/opam b/esy.lock/opam/either.1.0.0/opam
diff --git a/esy.lock/opam/fiber.3.7.0/opam b/esy.lock/opam/fiber.3.7.0/opam