From 7aad9f928f43c168bb256aac90dfb169862191cc Mon Sep 17 00:00:00 2001 From: MacOS Date: Thu, 16 Jul 2026 16:35:46 +0200 Subject: [PATCH 1/3] build(java-tests-workflow): pin checkout action with commit hash --- .github/workflows/java-tests.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/java-tests.yml b/.github/workflows/java-tests.yml index 21ebf9f5..e511a913 100644 --- a/.github/workflows/java-tests.yml +++ b/.github/workflows/java-tests.yml @@ -17,7 +17,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Copy CI gradle.properties run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties From afff41c700c6f79e7137a51d9f9a6b440ffee31a Mon Sep 17 00:00:00 2001 From: MacOS Date: Thu, 16 Jul 2026 16:36:36 +0200 Subject: [PATCH 2/3] build(java-tests-workflow): pin setup-java action with commit hash --- .github/workflows/java-tests.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/java-tests.yml b/.github/workflows/java-tests.yml index e511a913..4edf9ebd 100644 --- a/.github/workflows/java-tests.yml +++ b/.github/workflows/java-tests.yml @@ -23,7 +23,7 @@ jobs: run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties - name: Set up JDK 22 - uses: actions/setup-java@v5 + uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0 with: distribution: 'zulu' java-version: 22 From 65b73e79212b6a829b9bade3e910757208f3bdd7 Mon Sep 17 00:00:00 2001 From: MacOS Date: Thu, 16 Jul 2026 16:37:59 +0200 Subject: [PATCH 3/3] build(java-tests-workflow): pin upload-artifact action with commit hash --- .github/workflows/java-tests.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/java-tests.yml b/.github/workflows/java-tests.yml index 4edf9ebd..8f6699cb 100644 --- a/.github/workflows/java-tests.yml +++ b/.github/workflows/java-tests.yml @@ -37,7 +37,7 @@ jobs: - name: Upload test reports if: always() - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: java-test-reports path: |