Skip to content

Commit 91b0d5b

Browse files
renovate[bot]renovate[bot]
authored
chore(deps): pin dependencies
1 parent 7cbbdf6 commit 91b0d5b

8 files changed

+38
-38
lines changed

Diff for: ‎.github/workflows/codeql.yml

+5-5
Original file line numberDiff line numberDiff line change
@@ -38,15 +38,15 @@ jobs:
3838

3939
steps:
4040
- name: Checkout repository
41-
uses: actions/checkout@v4
41+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
4242
- name: "☕️ Setup JDK"
43-
uses: actions/setup-java@v4
43+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4
4444
with:
4545
distribution: liberica
4646
java-version: 17
4747
# Initializes the CodeQL tools for scanning.
4848
- name: Initialize CodeQL
49-
uses: github/codeql-action/init@v3
49+
uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3
5050
with:
5151
languages: ${{ matrix.language }}
5252
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -57,7 +57,7 @@ jobs:
5757
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
5858
# If this step fails, then you should remove it and run the build manually (see below)
5959
- name: Autobuild
60-
uses: github/codeql-action/autobuild@v3
60+
uses: github/codeql-action/autobuild@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3
6161

6262
# ℹ️ Command-line programs to run using the OS shell.
6363
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -71,4 +71,4 @@ jobs:
7171
# make release
7272

7373
- name: Perform CodeQL Analysis
74-
uses: github/codeql-action/analyze@v3
74+
uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3

Diff for: ‎.github/workflows/gradle.yml

+10-10
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
contents: read
1919
steps:
2020
- name: "📥 Checkout repository"
21-
uses: actions/checkout@v4
21+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
2222
- name: "🔍 Check if we should skip publish"
2323
id: check_prevent_property
2424
run: |
@@ -40,14 +40,14 @@ jobs:
4040
runs-on: ${{ matrix.os }}
4141
steps:
4242
- name: "📥 Checkout repository"
43-
uses: actions/checkout@v4
43+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
4444
- name: "☕️ Setup JDK"
45-
uses: actions/setup-java@v4
45+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4
4646
with:
4747
distribution: liberica
4848
java-version: ${{ matrix.java }}
4949
- name: "🐘 Setup Gradle"
50-
uses: gradle/actions/setup-gradle@v4
50+
uses: gradle/actions/setup-gradle@94baf225fe0a508e581a564467443d0e2379123b # v4
5151
with:
5252
develocity-access-key: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
5353
- name: "🔨 Build project"
@@ -68,14 +68,14 @@ jobs:
6868
runs-on: ubuntu-latest
6969
steps:
7070
- name: "📥 Checkout repository"
71-
uses: actions/checkout@v4
71+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
7272
- name: "☕️ Setup JDK"
73-
uses: actions/setup-java@v4
73+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4
7474
with:
7575
distribution: liberica
7676
java-version: ${{ matrix.java }}
7777
- name: "🐘 Setup Gradle"
78-
uses: gradle/actions/setup-gradle@v4
78+
uses: gradle/actions/setup-gradle@94baf225fe0a508e581a564467443d0e2379123b # v4
7979
with:
8080
develocity-access-key: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
8181
- name: "🔨 Functional Tests"
@@ -91,14 +91,14 @@ jobs:
9191
runs-on: ubuntu-latest
9292
steps:
9393
- name: "📥 Checkout repository"
94-
uses: actions/checkout@v4
94+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
9595
- name: "☕️ Setup JDK"
96-
uses: actions/setup-java@v4
96+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4
9797
with:
9898
distribution: liberica
9999
java-version: 17
100100
- name: "🐘 Setup Gradle"
101-
uses: gradle/actions/setup-gradle@v4
101+
uses: gradle/actions/setup-gradle@94baf225fe0a508e581a564467443d0e2379123b # v4
102102
with:
103103
develocity-access-key: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
104104
- name: "📤 Publish Snapshot Artifacts to Artifactory (repo.grails.org/libs-snapshot-local)"

Diff for: ‎.github/workflows/groovy-joint-workflow.yml

+8-8
Original file line numberDiff line numberDiff line change
@@ -16,17 +16,17 @@ jobs:
1616
groovyVersion: ${{ steps.groovy-version.outputs.value }}
1717
steps:
1818
- name: "☕️ Setup JDK"
19-
uses: actions/setup-java@v4
19+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4
2020
with:
2121
distribution: liberica
2222
java-version: 17
2323
- name: "🗄️ Cache local Maven repository"
24-
uses: actions/cache@v4
24+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4
2525
with:
2626
path: ~/.m2/repository
2727
key: cache-local-maven-${{ github.sha }}
2828
- name: "📥 Checkout Grails Core to fetch Gradle Plugin versions it uses"
29-
uses: actions/checkout@v4
29+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
3030
with:
3131
sparse-checkout-cone-mode: false
3232
sparse-checkout: settings.gradle
@@ -43,7 +43,7 @@ jobs:
4343
- name: "📥 Checkout Groovy 4_0_X (Grails 7 and later)"
4444
run: git clone --depth 1 https://github.com/apache/groovy.git -b GROOVY_4_0_X --single-branch
4545
- name: "🐘 Setup Gradle"
46-
uses: gradle/actions/setup-gradle@v4
46+
uses: gradle/actions/setup-gradle@94baf225fe0a508e581a564467443d0e2379123b # v4
4747
with:
4848
develocity-access-key: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
4949
- name: "📝 Store Groovy version to use when building Grails"
@@ -117,18 +117,18 @@ jobs:
117117
runs-on: ubuntu-latest
118118
steps:
119119
- name: "📥 Checkout project"
120-
uses: actions/checkout@v4
120+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
121121
- name: "☕️ Setup JDK"
122-
uses: actions/setup-java@v4
122+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4
123123
with:
124124
distribution: liberica
125125
java-version: 17
126126
- name: "🐘 Setup Gradle"
127-
uses: gradle/actions/setup-gradle@v4
127+
uses: gradle/actions/setup-gradle@94baf225fe0a508e581a564467443d0e2379123b # v4
128128
with:
129129
develocity-access-key: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
130130
- name: "🗄️ Restore local Maven repository from cache"
131-
uses: actions/cache@v4
131+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4
132132
with:
133133
path: ~/.m2/repository
134134
key: cache-local-maven-${{ github.sha }}

Diff for: ‎.github/workflows/pre-release.yml

+3-3
Original file line numberDiff line numberDiff line change
@@ -280,7 +280,7 @@ jobs:
280280
-H "X-GitHub-Api-Version: 2022-11-28" \
281281
https://api.github.com/orgs/${{ github.repository_owner }}/packages/maven/org.grails.grails-web-mvc || true
282282
- name: "📥 Checkout repository"
283-
uses: actions/checkout@v4
283+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
284284
- name: "🛑 Set Prevent Snapshot Publishing Flag"
285285
if: ${{ github.event.inputs.preventSnapshots }}
286286
run: |
@@ -298,12 +298,12 @@ jobs:
298298
echo "Publishing already disabled."
299299
fi
300300
- name: "☕️ Setup JDK"
301-
uses: actions/setup-java@v4
301+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4
302302
with:
303303
distribution: 'liberica'
304304
java-version: '17'
305305
- name: "🐘 Setup Gradle"
306-
uses: gradle/actions/setup-gradle@v4
306+
uses: gradle/actions/setup-gradle@94baf225fe0a508e581a564467443d0e2379123b # v4
307307
with:
308308
develocity-access-key: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
309309
- name: "⚙ Set version to ${{ github.event.inputs.targetVersion }}"

Diff for: ‎.github/workflows/release-notes.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,6 @@ jobs:
1919
runs-on: ubuntu-latest
2020
steps:
2121
- name: "📝 Update Release Draft"
22-
uses: release-drafter/release-drafter@v6
22+
uses: release-drafter/release-drafter@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5 # v6
2323
env:
2424
GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}

Diff for: ‎.github/workflows/release.yml

+6-6
Original file line numberDiff line numberDiff line change
@@ -274,7 +274,7 @@ jobs:
274274
-H "X-GitHub-Api-Version: 2022-11-28" \
275275
https://api.github.com/orgs/${{ github.repository_owner }}/packages/maven/org.grails.grails-web-mvc || true
276276
- name: "📥 Checkout repository"
277-
uses: actions/checkout@v4
277+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
278278
- name: "⎌ Revert Prevent Snapshot Publishing Flag"
279279
run: |
280280
sed -i "s/^preventSnapshotPublish.*$/preventSnapshotPublish\=false/" gradle.properties
@@ -290,12 +290,12 @@ jobs:
290290
echo "Publishing already enabled."
291291
fi
292292
- name: "☕️ Setup JDK"
293-
uses: actions/setup-java@v4
293+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4
294294
with:
295295
distribution: liberica
296296
java-version: 17
297297
- name: "🐘 Setup Gradle"
298-
uses: gradle/actions/setup-gradle@v4
298+
uses: gradle/actions/setup-gradle@94baf225fe0a508e581a564467443d0e2379123b # v4
299299
with:
300300
develocity-access-key: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
301301
- name: "📝 Store the target branch"
@@ -361,17 +361,17 @@ jobs:
361361
contents: read # limit to read access
362362
steps:
363363
- name: "📥 Checkout repository"
364-
uses: actions/checkout@v4
364+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
365365
with:
366366
token: ${{ secrets.GH_TOKEN }}
367367
ref: v${{ needs.publish.outputs.release_version }}
368368
- name: "☕️ Setup JDK"
369-
uses: actions/setup-java@v4
369+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4
370370
with:
371371
distribution: liberica
372372
java-version: 17
373373
- name: "🐘 Setup Gradle"
374-
uses: gradle/actions/setup-gradle@v4
374+
uses: gradle/actions/setup-gradle@94baf225fe0a508e581a564467443d0e2379123b # v4
375375
with:
376376
develocity-access-key: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
377377
- name: "🚪 Nexus Staging Close And Release"

Diff for: ‎.github/workflows/retry-release.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
GIT_USER_EMAIL: '[email protected]'
2121
steps:
2222
- name: "📥 Checkout repository"
23-
uses: actions/checkout@v4
23+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
2424
with:
2525
ref: "v${{ github.event.inputs.release }}"
2626
token: ${{ secrets.GH_TOKEN }}
@@ -30,7 +30,7 @@ jobs:
3030
distribution: liberica
3131
java-version: 17
3232
- name: "🐘 Setup Gradle"
33-
uses: gradle/actions/setup-gradle@v4
33+
uses: gradle/actions/setup-gradle@94baf225fe0a508e581a564467443d0e2379123b # v4
3434
with:
3535
develocity-access-key: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
3636
- name: "📝 Store the target branch"

Diff for: ‎.github/workflows/sdkman.yml

+3-3
Original file line numberDiff line numberDiff line change
@@ -12,17 +12,17 @@ jobs:
1212
contents: read
1313
steps:
1414
- name: "📥 Checkout repository"
15-
uses: actions/checkout@v4
15+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
1616
with:
1717
token: ${{ secrets.GH_TOKEN }}
1818
ref: v${{ github.event.inputs.version }}
1919
- name: "☕️ Setup JDK"
20-
uses: actions/setup-java@v4
20+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4
2121
with:
2222
distribution: liberica
2323
java-version: 17
2424
- name: "🐘 Setup Gradle"
25-
uses: gradle/actions/setup-gradle@v4
25+
uses: gradle/actions/setup-gradle@94baf225fe0a508e581a564467443d0e2379123b # v4
2626
with:
2727
develocity-access-key: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
2828
- name: "🏆 Grails SDK Minor Release"

0 commit comments

Comments
 (0)