This is an automated email from the ASF dual-hosted git repository.

vy pushed a commit to branch release-2.x
in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git


The following commit(s) were added to refs/heads/release-2.x by this push:
     new bcf34fe5ed Fix GitHub Actions dependency version comments (#971)
bcf34fe5ed is described below

commit bcf34fe5ed03afa8ec9c939e4d413de1a07dc67b
Author: Marc Wrobel <[email protected]>
AuthorDate: Mon Jul 25 21:33:38 2022 +0200

    Fix GitHub Actions dependency version comments (#971)
---
 .github/workflows/benchmark.yml           | 16 ++++++++--------
 .github/workflows/build.yml               | 12 ++++++------
 .github/workflows/codeql-analysis.yml     |  8 ++++----
 .github/workflows/scorecards-analysis.yml |  6 +++---
 4 files changed, 21 insertions(+), 21 deletions(-)

diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
index 0d500dea5c..24eb358d42 100644
--- a/.github/workflows/benchmark.yml
+++ b/.github/workflows/benchmark.yml
@@ -28,12 +28,12 @@ jobs:
     steps:
 
       - name: Checkout repository
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b   # 
3.0.1
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b   # 
3.0.2
 
       # JDK 11 is needed for the build.
       # Search `maven-toolchains-plugin` usages for details.
       - name: Set up JDK 11
-        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 
3.1.1
+        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 
3.4.1
         with:
           distribution: temurin
           java-version: 11
@@ -44,7 +44,7 @@ jobs:
       # JDK 8 is needed for the build, and it is the primary bytecode target.
       # Hence, JDK 8 is set up after 11, so that JAVA_HOME used by Maven 
during build will point to 8.
       - name: Set up JDK 8
-        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 
3.1.1
+        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 
3.4.1
         with:
           distribution: temurin
           java-version: 8
@@ -64,7 +64,7 @@ jobs:
             package
 
       - name: Upload built sources
-        uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 
   # 3.0.0
+        uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 
   # 3.1.0
         with:
           name: benchmarks.jar
           path: log4j-perf/target/benchmarks.jar
@@ -87,7 +87,7 @@ jobs:
     steps:
 
       - name: Checkout repository
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b   # 
3.0.1
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b   # 
3.0.2
 
       - name: Download built sources
         uses: 
actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741    # 3.0.0
@@ -96,7 +96,7 @@ jobs:
           path: log4j-perf/target
 
       - name: Set up JDK ${{ matrix.jdk }}
-        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 
3.1.1
+        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 
3.4.1
         with:
           distribution: temurin
           java-version: ${{ matrix.jdk }}
@@ -192,12 +192,12 @@ jobs:
     steps:
 
       - name: Checkout repository
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b   # 
3.0.1
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b   # 
3.0.2
         with:
           ref: gh-pages
 
       - name: Setup Python 3
-        uses: actions/setup-python@d09bd5e6005b175076f227b13d9730d56e9dcfcb   
# 4.0.0
+        uses: actions/setup-python@d09bd5e6005b175076f227b13d9730d56e9dcfcb   
# 4.1.0
         with:
           python-version: 3.x
 
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 573be79315..39326e7c1c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -36,12 +36,12 @@ jobs:
     steps:
 
       - name: Checkout repository
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b   # 
3.0.1
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b   # 
3.0.2
 
       # JDK 11 is needed for the build.
       # Search `maven-toolchains-plugin` usages for details.
       - name: Setup JDK 11
-        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 
3.1.1
+        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 
3.4.1
         with:
           distribution: temurin
           java-version: 11
@@ -52,7 +52,7 @@ jobs:
       # JDK 8 is needed for the build, and it is the primary bytecode target.
       # Hence, JDK 8 is set up after 11, so that JAVA_HOME used by Maven 
during build will point to 8.
       - name: Setup JDK 8
-        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 
3.1.1
+        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 
3.4.1
         with:
           distribution: temurin
           java-version: 8
@@ -108,12 +108,12 @@ jobs:
     steps:
 
       - name: Checkout repository
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b   # 
3.0.1
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b   # 
3.0.2
 
       # JDK 11 is needed for the build.
       # Search `maven-toolchains-plugin` usages for details.
       - name: Setup JDK 11
-        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 
3.1.1
+        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 
3.4.1
         with:
           distribution: temurin
           java-version: 11
@@ -124,7 +124,7 @@ jobs:
       # JDK 8 is needed for the build, and it is the primary bytecode target.
       # Hence, JDK 8 is set up after 11, so that JAVA_HOME used by Maven 
during build will point to 8.
       - name: Setup JDK 8
-        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 
3.1.1
+        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 
3.4.1
         with:
           distribution: temurin
           java-version: 8
diff --git a/.github/workflows/codeql-analysis.yml 
b/.github/workflows/codeql-analysis.yml
index d582015929..e4331ae323 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -45,7 +45,7 @@ jobs:
     steps:
 
       - name: Checkout repository
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b   # 
3.0.1
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b   # 
3.0.2
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
@@ -60,7 +60,7 @@ jobs:
       # JDK 11 is needed for the build.
       # Search `maven-toolchains-plugin` usages for details.
       - name: Setup JDK 11
-        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 
3.1.1
+        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 
3.4.1
         with:
           distribution: temurin
           java-version: 11
@@ -71,7 +71,7 @@ jobs:
       # JDK 8 is needed for the build, and it is the primary bytecode target.
       # Hence, JDK 8 is set up after 11, so that JAVA_HOME used by Maven 
during build will point to 8.
       - name: Setup JDK 8
-        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 
3.1.1
+        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 
3.4.1
         with:
           distribution: temurin
           java-version: 8
@@ -89,4 +89,4 @@ jobs:
           --global-toolchains ".github/workflows/maven-toolchains.xml"
 
       - name: Perform CodeQL Analysis
-        uses: 
github/codeql-action/analyze@935969c6f771d9f0a35efa2ae9cf7c10d9886ca3    # 2.8.5
+        uses: 
github/codeql-action/analyze@935969c6f771d9f0a35efa2ae9cf7c10d9886ca3    # 
2.1.16
diff --git a/.github/workflows/scorecards-analysis.yml 
b/.github/workflows/scorecards-analysis.yml
index c8099000ce..ea919f7b96 100644
--- a/.github/workflows/scorecards-analysis.yml
+++ b/.github/workflows/scorecards-analysis.yml
@@ -38,7 +38,7 @@ jobs:
     steps:
 
       - name: "Checkout code"
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b   # 
3.0.1
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b   # 
3.0.2
         with:
           persist-credentials: false
 
@@ -55,13 +55,13 @@ jobs:
           publish_results: true
 
       - name: "Upload artifact"
-        uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 
   # 3.0.0
+        uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 
   # 3.1.0
         with:
           name: SARIF file
           path: results.sarif
           retention-days: 5
 
       - name: "Upload to code-scanning"
-        uses: 
github/codeql-action/upload-sarif@935969c6f771d9f0a35efa2ae9cf7c10d9886ca3    # 
2.8.5
+        uses: 
github/codeql-action/upload-sarif@935969c6f771d9f0a35efa2ae9cf7c10d9886ca3    # 
2.1.16
         with:
           sarif_file: results.sarif

Reply via email to