From 303da9a305bacdc40992e19e86dcc8c816d6c9e5 Mon Sep 17 00:00:00 2001 From: MacOS Date: Fri, 17 Jul 2026 12:45:07 +0200 Subject: [PATCH 1/6] build(publish-workflow): pin checkout action with commit hash --- .github/workflows/publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 40358f1b..982c69b4 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -51,7 +51,7 @@ jobs: timeout-minutes: 30 steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Set up JDK 25 uses: actions/setup-java@v5 From cb7a1e5a3306bbd2bfabd29031b58f85c99fde29 Mon Sep 17 00:00:00 2001 From: MacOS Date: Fri, 17 Jul 2026 12:46:23 +0200 Subject: [PATCH 2/6] build(publish-workflow): pin setup-java action with commit hash --- .github/workflows/publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 982c69b4..2f00ce15 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -54,7 +54,7 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Set up JDK 25 - uses: actions/setup-java@v5 + uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0 with: distribution: 'zulu' java-version: 25 From 5577e3b31e48a6899a557552ac730477f9ec3a89 Mon Sep 17 00:00:00 2001 From: MacOS Date: Fri, 17 Jul 2026 12:47:43 +0200 Subject: [PATCH 3/6] build(publish-workflow): pin upload-artifact with commit hash --- .github/workflows/publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 2f00ce15..5233f4b8 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -80,7 +80,7 @@ jobs: :skainet-backends:skainet-backend-native-cpu:packageNativeKernels - name: Upload native artifact - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: native-${{ matrix.arch_label }} path: skainet-backends/skainet-backend-native-cpu/build/native/resources/native/${{ matrix.arch_label }}/${{ matrix.lib_name }} From edf0939c7447e7e4a4b6b74ce90f738ec995f6d1 Mon Sep 17 00:00:00 2001 From: MacOS Date: Fri, 17 Jul 2026 12:48:52 +0200 Subject: [PATCH 4/6] build(publish-workflow): pin checkout action with commit hash --- .github/workflows/publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 5233f4b8..7bde435a 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -93,7 +93,7 @@ jobs: runs-on: macOS-latest steps: - name: Check out code - uses: actions/checkout@v7.0.0 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Set up JDK 25 uses: actions/setup-java@v5 From bf00a8630a34a9701638f43b3f7e1fdb3c82d904 Mon Sep 17 00:00:00 2001 From: MacOS Date: Fri, 17 Jul 2026 12:49:54 +0200 Subject: [PATCH 5/6] build(publish-workflow): pin setup-java action with commit hash --- .github/workflows/publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 7bde435a..a559cf9f 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -96,7 +96,7 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Set up JDK 25 - uses: actions/setup-java@v5 + uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0 with: distribution: 'zulu' java-version: 25 From 6fcb0d72dc616c7381bb177907ab03f1bfcfb10b Mon Sep 17 00:00:00 2001 From: MacOS Date: Fri, 17 Jul 2026 12:52:06 +0200 Subject: [PATCH 6/6] build(publish-workflow): pin download-artifact action with commit hash --- .github/workflows/publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index a559cf9f..463fe349 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -111,7 +111,7 @@ jobs: fi - name: Download cross-arch native artifacts - uses: actions/download-artifact@v8 + uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0 with: path: native-artifacts # All artifacts named `native-*` from the build-native matrix.