Skip to content

Commit c3a95e5

Browse files
author
Patrick Schwager
committed
pin versions
1 parent 8698b94 commit c3a95e5

6 files changed

Lines changed: 23 additions & 21 deletions

File tree

‎.github/dependabot.yml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,3 +13,5 @@ updates:
1313
labels:
1414
- "dependencies"
1515
- "dependabot"
16+
cooldown:
17+
default-days: 7

‎.github/workflows/dependabot-automerge.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
if: ${{ github.actor == 'dependabot[bot]' }}
1717
steps:
1818
- name: Checkout
19-
uses: actions/checkout@v4.2.2
19+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2020
- name: Approve Dependabot PRs
2121
run: gh pr review --approve "$PR_URL"
2222
env:

‎.github/workflows/gradle-ci-main.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -36,16 +36,16 @@ jobs:
3636
packages: write
3737
steps:
3838
- name: Checkout
39-
uses: actions/checkout@v4.2.2
39+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4040
- name: REUSE Compliance Check
41-
uses: fsfe/reuse-action@v5.0.0
41+
uses: fsfe/reuse-action@bb774aa972c2a89ff34781233d275075cbddf542 # v5.0.0
4242
- name: Set up JDK 25
43-
uses: actions/setup-java@v4.7.0
43+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
4444
with:
4545
java-version: '25'
4646
distribution: 'temurin'
4747
- name: Setup Gradle
48-
uses: gradle/actions/setup-gradle@v4.3.0
48+
uses: gradle/actions/setup-gradle@94baf225fe0a508e581a564467443d0e2379123b # v4.3.0
4949
- name: Build and publish with Gradle
5050
env:
5151
ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.oss-username }}
@@ -60,4 +60,4 @@ jobs:
6060
run: |
6161
./gradlew publish
6262
- name: Generate and submit dependency graph
63-
uses: gradle/actions/dependency-submission@v4.3.0
63+
uses: gradle/actions/dependency-submission@94baf225fe0a508e581a564467443d0e2379123b # v4.3.0

‎.github/workflows/gradle-ci.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -14,21 +14,21 @@ jobs:
1414
contents: read
1515
steps:
1616
- name: Checkout
17-
uses: actions/checkout@v4.2.2
17+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1818
- name: REUSE Compliance Check
19-
uses: fsfe/reuse-action@v5.0.0
19+
uses: fsfe/reuse-action@bb774aa972c2a89ff34781233d275075cbddf542 # v5.0.0
2020
- name: Set up JDK 25
21-
uses: actions/setup-java@v4.7.0
21+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
2222
with:
2323
java-version: '25'
2424
distribution: 'temurin'
2525
- name: Setup Gradle
26-
uses: gradle/actions/setup-gradle@v4.3.0
26+
uses: gradle/actions/setup-gradle@94baf225fe0a508e581a564467443d0e2379123b # v4.3.0
2727
- name: Build with Gradle
2828
run: ./gradlew build
2929
- name: Upload JUnit XML test results
3030
if: always()
31-
uses: actions/upload-artifact@v4
31+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
3232
with:
3333
name: junit-test-results
3434
path: |
@@ -37,7 +37,7 @@ jobs:
3737
retention-days: 1
3838
- name: Upload HTML test reports
3939
if: always()
40-
uses: actions/upload-artifact@v4
40+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
4141
with:
4242
name: junit-test-report-html
4343
path: |

‎.github/workflows/gradle-release-app.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -48,25 +48,25 @@ jobs:
4848
version: ${{ steps.Publish.outputs.version }}
4949
steps:
5050
- name: Get Token
51-
uses: actions/create-github-app-token@v1
51+
uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1.12.0
5252
id: app-token
5353
with:
5454
app-id: ${{ secrets.bot-app-id }}
5555
private-key: ${{ secrets.bot-private-key }}
5656
- name: Checkout
57-
uses: actions/checkout@v4.2.2
57+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
5858
with:
5959
ref: main
6060
token: ${{ steps.app-token.outputs.token }}
6161
- name: REUSE Compliance Check
62-
uses: fsfe/reuse-action@v5.0.0
62+
uses: fsfe/reuse-action@bb774aa972c2a89ff34781233d275075cbddf542 # v5.0.0
6363
- name: Set up JDK 25
64-
uses: actions/setup-java@v4.7.0
64+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
6565
with:
6666
java-version: '25'
6767
distribution: 'temurin'
6868
- name: Setup Gradle
69-
uses: gradle/actions/setup-gradle@v4.3.0
69+
uses: gradle/actions/setup-gradle@94baf225fe0a508e581a564467443d0e2379123b # v4.3.0
7070
- name: Publish
7171
id: Publish
7272
env:

‎.github/workflows/gradle-release.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -46,19 +46,19 @@ jobs:
4646
version: ${{ steps.Publish.outputs.version }}
4747
steps:
4848
- name: Checkout
49-
uses: actions/checkout@v4.2.2
49+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
5050
with:
5151
ref: main
5252
token: ${{ secrets.bot-token }}
5353
- name: REUSE Compliance Check
54-
uses: fsfe/reuse-action@v5.0.0
54+
uses: fsfe/reuse-action@bb774aa972c2a89ff34781233d275075cbddf542 # v5.0.0
5555
- name: Set up JDK 25
56-
uses: actions/setup-java@v4.7.0
56+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
5757
with:
5858
java-version: '25'
5959
distribution: 'temurin'
6060
- name: Setup Gradle
61-
uses: gradle/actions/setup-gradle@v4.3.0
61+
uses: gradle/actions/setup-gradle@94baf225fe0a508e581a564467443d0e2379123b # v4.3.0
6262
- name: Publish
6363
id: Publish
6464
env:

0 commit comments

Comments
 (0)