From 66a5f99dbe39212542ee5617637ffd6d4f957322 Mon Sep 17 00:00:00 2001 From: MacOS Date: Tue, 14 Jul 2026 10:31:13 +0200 Subject: [PATCH 1/5] ci(build-workflow): pin checkout action with commit hash --- .github/workflows/build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index fbdd1883..92cadb82 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -17,7 +17,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Copy CI gradle.properties run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties From f6bce69c1998a89f7ea243eefcc6c93b1785eaad Mon Sep 17 00:00:00 2001 From: MacOS Date: Tue, 14 Jul 2026 10:33:56 +0200 Subject: [PATCH 2/5] ci(build-workflow): pin setup-java action with commit hash --- .github/workflows/build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 92cadb82..1e545b31 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -23,7 +23,7 @@ jobs: run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties - name: Set up JDK 25 - uses: actions/setup-java@v5 + uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0 with: distribution: 'zulu' java-version: 25 From b9c93ec47d6966c26a1f6d431bc40845942e370f Mon Sep 17 00:00:00 2001 From: MacOS Date: Tue, 14 Jul 2026 10:36:46 +0200 Subject: [PATCH 3/5] ci(build-workflow): pin setup-node action with commit hash --- .github/workflows/build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 1e545b31..f4f4b3d7 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -29,7 +29,7 @@ jobs: java-version: 25 - name: Set up Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.0.0 with: node-version: '20' From 4e021204d58c0b8a9523f6ab6b1e1fa3e7113642 Mon Sep 17 00:00:00 2001 From: MacOS Date: Tue, 14 Jul 2026 10:43:48 +0200 Subject: [PATCH 4/5] ci(build-workflow): pin upload-artifact action with commit hash --- .github/workflows/build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index f4f4b3d7..7f4883a2 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -68,7 +68,7 @@ jobs: - name: Upload all test reports if: always() - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: test-reports path: | From e89b9aced8d567c3b97754cc1c5fbe0161fe8039 Mon Sep 17 00:00:00 2001 From: MacOS Date: Tue, 14 Jul 2026 10:48:02 +0200 Subject: [PATCH 5/5] fix(build-workflow): add correct commit hash for setup-node action version 6 --- .github/workflows/build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 7f4883a2..dfda4707 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -29,7 +29,7 @@ jobs: java-version: 25 - name: Set up Node.js - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.0.0 + uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0 with: node-version: '20'