build: pin envinfo versions in github actions

Currently they all run `npx envinfo` without pinning the version.
This can be a supply-chain risk.

Signed-off-by: Joyee Cheung <joyeec9h3@gmail.com>
PR-URL: #64117
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Reviewed-By: Michaël Zasso <targos@protonmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day>

Author: joyeecheung

.github/workflows/build-tarball.yml

@@ -49,7 +49,7 @@ jobs:
         with:
           python-version: ${{ env.PYTHON_VERSION }}
       - name: Environment Information
-        run: npx envinfo
+        run: npx envinfo@7.21.0
       - name: Make tarball
         run: |
           export DISTTYPE=nightly
@@ -86,7 +86,7 @@ jobs:
         with:
           version: v0.16.0
       - name: Environment Information
-        run: npx envinfo
+        run: npx envinfo@7.21.0
       - name: Download tarball
         uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:

.github/workflows/coverage-linux-without-intl.yml

@@ -62,7 +62,7 @@ jobs:
         with:
           version: v0.16.0
       - name: Environment Information
-        run: npx envinfo
+        run: npx envinfo@7.21.0
       - name: Install gcovr
         run: pip install gcovr==7.2
       - name: Configure

.github/workflows/coverage-linux.yml

@@ -62,7 +62,7 @@ jobs:
         with:
           version: v0.16.0
       - name: Environment Information
-        run: npx envinfo
+        run: npx envinfo@7.21.0
       - name: Install gcovr
         run: pip install gcovr==7.2
       - name: Configure

.github/workflows/coverage-windows.yml

@@ -79,7 +79,7 @@ jobs:
       - name: Install deps
         run: choco install nasm
       - name: Environment Information
-        run: npx envinfo
+        run: npx envinfo@7.21.0
       - name: Build
         run: ./vcbuild.bat clang-cl
       # TODO(bcoe): investigate tests that fail with coverage enabled

.github/workflows/daily-wpt-fyi.yml

@@ -43,7 +43,7 @@ jobs:
         with:
           python-version: ${{ env.PYTHON_VERSION }}
       - name: Environment Information
-        run: npx envinfo
+        run: npx envinfo@7.21.0
 
       # install a version and checkout
       - name: Get latest nightly

.github/workflows/daily.yml

@@ -24,7 +24,7 @@ jobs:
         with:
           node-version: ${{ env.NODE_VERSION }}
       - name: Environment Information
-        run: npx envinfo
+        run: npx envinfo@7.21.0
       - name: Build lto
         run: |
           sudo apt-get update && sudo apt-get install ninja-build -y

.github/workflows/doc.yml

@@ -32,7 +32,7 @@ jobs:
         with:
           node-version: ${{ env.NODE_VERSION }}
       - name: Environment Information
-        run: npx envinfo
+        run: npx envinfo@7.21.0
       - name: Build
         run: NODE=$(command -v node) make doc-only
       - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1

.github/workflows/linters.yml

@@ -33,7 +33,7 @@ jobs:
         with:
           node-version: ${{ env.NODE_VERSION }}
       - name: Environment Information
-        run: npx envinfo
+        run: npx envinfo@7.21.0
       - name: Lint addon docs
         run: NODE=$(command -v node) make lint-addon-docs
   lint-cpp:
@@ -48,7 +48,7 @@ jobs:
         with:
           python-version: ${{ env.PYTHON_VERSION }}
       - name: Environment Information
-        run: npx envinfo
+        run: npx envinfo@7.21.0
       - name: Lint C/C++ files
         run: make lint-cpp
   format-cpp:
@@ -68,7 +68,7 @@ jobs:
         with:
           python-version: ${{ env.PYTHON_VERSION }}
       - name: Environment Information
-        run: npx envinfo
+        run: npx envinfo@7.21.0
       - name: Format C/C++ files
         run: |
           make format-cpp-build
@@ -101,7 +101,7 @@ jobs:
         with:
           node-version: ${{ env.NODE_VERSION }}
       - name: Environment Information
-        run: npx envinfo
+        run: npx envinfo@7.21.0
       - name: Lint JavaScript files
         run: |
           set +e
@@ -160,7 +160,7 @@ jobs:
         with:
           python-version: ${{ env.PYTHON_VERSION }}
       - name: Environment Information
-        run: npx envinfo
+        run: npx envinfo@7.21.0
       - name: Lint Python
         run: |
           make lint-py-build
@@ -183,7 +183,7 @@ jobs:
         with:
           python-version: ${{ env.PYTHON_VERSION }}
       - name: Environment Information
-        run: npx envinfo
+        run: npx envinfo@7.21.0
       - name: Lint YAML
         run: |
           make lint-yaml-build || true

.github/workflows/test-internet.yml

@@ -59,7 +59,7 @@ jobs:
         with:
           version: v0.16.0
       - name: Environment Information
-        run: npx envinfo
+        run: npx envinfo@7.21.0
       - name: Build
         run: make build-ci -j4 V=1 CONFIG_FLAGS="--error-on-warn"
       - name: Test Internet

.github/workflows/test-linux-quic.yml

@@ -59,7 +59,7 @@ jobs:
         with:
           version: v0.16.0
       - name: Environment Information
-        run: npx envinfo
+        run: npx envinfo@7.21.0
       - name: Build
         working-directory: node
         run: make build-ci -j4 V=1 CONFIG_FLAGS="--error-on-warn --experimental-quic"