From af864f8ec31970dea7d66e2163ede20130982fd7 Mon Sep 17 00:00:00 2001 From: MacOS Date: Wed, 15 Jul 2026 14:00:57 +0200 Subject: [PATCH 1/8] build(documentation-workflow): pin checkout action with commit hash --- .github/workflows/documentation.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml index 1faf26f8..af05812b 100644 --- a/.github/workflows/documentation.yml +++ b/.github/workflows/documentation.yml @@ -27,7 +27,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v7.0.0 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Set up JDK 25 uses: actions/setup-java@v5 From 5506341f3460410648f115aaa2e00f7312c831fd Mon Sep 17 00:00:00 2001 From: MacOS Date: Wed, 15 Jul 2026 14:01:51 +0200 Subject: [PATCH 2/8] build(documentation-workflow): pin setup-java action with commit hash --- .github/workflows/documentation.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml index af05812b..787b2a3e 100644 --- a/.github/workflows/documentation.yml +++ b/.github/workflows/documentation.yml @@ -30,7 +30,7 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Set up JDK 25 - uses: actions/setup-java@v5 + uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0 with: java-version: '25' distribution: 'temurin' From 401d159530b3c08c068243101ec0bc8984c85673 Mon Sep 17 00:00:00 2001 From: MacOS Date: Wed, 15 Jul 2026 14:02:41 +0200 Subject: [PATCH 3/8] build(documentation-workflow): pin cache action with commit hash --- .github/workflows/documentation.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml index 787b2a3e..ac6af058 100644 --- a/.github/workflows/documentation.yml +++ b/.github/workflows/documentation.yml @@ -36,7 +36,7 @@ jobs: distribution: 'temurin' - name: Cache Gradle packages - uses: actions/cache@v6 + uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0 with: path: | ~/.gradle/caches From dfb011d1a66e15b21b3cba175d8022e47ea30112 Mon Sep 17 00:00:00 2001 From: MacOS Date: Wed, 15 Jul 2026 14:04:40 +0200 Subject: [PATCH 4/8] build(documentation-workflow): pin upload-artifact action with commit hash --- .github/workflows/documentation.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml index ac6af058..72a01272 100644 --- a/.github/workflows/documentation.yml +++ b/.github/workflows/documentation.yml @@ -55,7 +55,7 @@ jobs: run: ./gradlew generateDocs --stacktrace - name: Upload generated documentation - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: operator-documentation path: | From 30e502fd1ea7275e96f28d6ebdd6b759d06a2a04 Mon Sep 17 00:00:00 2001 From: MacOS Date: Wed, 15 Jul 2026 14:05:36 +0200 Subject: [PATCH 5/8] build(documentation-workflow): pin upload-artifact action with commit hash --- .github/workflows/documentation.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml index 72a01272..b0cc022a 100644 --- a/.github/workflows/documentation.yml +++ b/.github/workflows/documentation.yml @@ -65,7 +65,7 @@ jobs: - name: Upload documentation preview (PR only) if: github.event_name == 'pull_request' - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: documentation-preview-${{ github.event.number }} path: | From 98376b300480594389dec9dfcc7d2de13539b518 Mon Sep 17 00:00:00 2001 From: MacOS Date: Wed, 15 Jul 2026 14:07:07 +0200 Subject: [PATCH 6/8] build(documentation-workflow): pin download-artifact action with commit hash --- .github/workflows/documentation.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml index b0cc022a..b23d4dfd 100644 --- a/.github/workflows/documentation.yml +++ b/.github/workflows/documentation.yml @@ -81,7 +81,7 @@ jobs: steps: - name: Download documentation artifacts - uses: actions/download-artifact@v8 + uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0 with: name: documentation-preview-${{ github.event.number }} path: ./docs-preview From 66538fe0d210394f44eafd858cd2c1260c348c32 Mon Sep 17 00:00:00 2001 From: MacOS Date: Wed, 15 Jul 2026 14:08:35 +0200 Subject: [PATCH 7/8] build(documentation-workflow): pin setup-node action with commit hash --- .github/workflows/documentation.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml index b23d4dfd..9d966815 100644 --- a/.github/workflows/documentation.yml +++ b/.github/workflows/documentation.yml @@ -87,7 +87,7 @@ jobs: path: ./docs-preview - name: Setup Node.js for preview server - uses: actions/setup-node@v6 + uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0 with: node-version: '18' From 191316906e99f1b42055bc4f1533f06585524745 Mon Sep 17 00:00:00 2001 From: MacOS Date: Wed, 15 Jul 2026 14:09:54 +0200 Subject: [PATCH 8/8] build(documentation-workflow): pin github-script action with commit hash --- .github/workflows/documentation.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml index 9d966815..352ed083 100644 --- a/.github/workflows/documentation.yml +++ b/.github/workflows/documentation.yml @@ -102,7 +102,7 @@ jobs: echo "Preview server started at http://localhost:3000" - name: Create PR comment with preview link - uses: actions/github-script@v9 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: script: | const { data: comments } = await github.rest.issues.listComments({