This is an automated email from the ASF dual-hosted git repository.

engelen pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/pekko-http.git


The following commit(s) were added to refs/heads/main by this push:
     new 4c81d9cd1 pin GitHub Actions (#691)
4c81d9cd1 is described below

commit 4c81d9cd1528aaa8669cc0d8c2cf5a001fcdcf60
Author: Arnout Engelen <[email protected]>
AuthorDate: Mon Jun 16 14:19:21 2025 +0200

    pin GitHub Actions (#691)
    
    with octopin
---
 .github/workflows/dependency-graph.yml      |  8 ++++----
 .github/workflows/format.yml                |  2 +-
 .github/workflows/headers.yml               |  8 ++++----
 .github/workflows/link-validator.yml        | 10 +++++-----
 .github/workflows/nightly.yml               | 12 ++++++------
 .github/workflows/publish-1.0-docs.yml      | 10 +++++-----
 .github/workflows/publish-1.0-snapshots.yml |  8 ++++----
 .github/workflows/publish-1.1-docs.yml      | 10 +++++-----
 .github/workflows/publish-1.1-snapshots.yml |  8 ++++----
 .github/workflows/publish.yml               | 16 ++++++++--------
 .github/workflows/scala-steward.yml         |  2 +-
 .github/workflows/validate-and-test.yml     | 24 ++++++++++++------------
 12 files changed, 59 insertions(+), 59 deletions(-)

diff --git a/.github/workflows/dependency-graph.yml 
b/.github/workflows/dependency-graph.yml
index 41a6fe133..de6b4efaf 100644
--- a/.github/workflows/dependency-graph.yml
+++ b/.github/workflows/dependency-graph.yml
@@ -24,11 +24,11 @@ jobs:
   dependency-graph:
     name: Update Dependency Graph
     runs-on: ubuntu-latest
-    if: github.repository == 'apache/pekko-http'    
+    if: github.repository == 'apache/pekko-http'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
       - name: Install sbt
-        uses: sbt/setup-sbt@v1      
-      - uses: scalacenter/sbt-dependency-submission@v3
+        uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9
+      - uses: 
scalacenter/sbt-dependency-submission@64084844d2b0a9b6c3765f33acde2fbe3f5ae7d3 
# v3.1.0
         with:
           modules-ignore: pekko-http-tests_3 pekko-http-docs_3
diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml
index 979879f8b..0530a45f7 100644
--- a/.github/workflows/format.yml
+++ b/.github/workflows/format.yml
@@ -30,7 +30,7 @@ jobs:
     if: github.repository == 'apache/pekko-http'
     steps:
       - name: Checkout current branch (full)
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/headers.yml b/.github/workflows/headers.yml
index 35dacf9e3..97e84e03a 100644
--- a/.github/workflows/headers.yml
+++ b/.github/workflows/headers.yml
@@ -28,19 +28,19 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
 
       - name: Setup Java 8
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: 8
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Enable jvm-opts
         run: cp .jvmopts-ci .jvmopts
diff --git a/.github/workflows/link-validator.yml 
b/.github/workflows/link-validator.yml
index 04407c8e2..2e739649f 100644
--- a/.github/workflows/link-validator.yml
+++ b/.github/workflows/link-validator.yml
@@ -22,7 +22,7 @@ jobs:
     if: github.repository == 'apache/pekko-http'
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
 
       - name: Checkout GitHub merge
         if: github.event.pull_request
@@ -32,19 +32,19 @@ jobs:
 
       # needs Java 8, see 
https://github.com/apache/pekko-http/pull/204#discussion_r1265279415
       - name: Setup Java 8
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: 8
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1          
+        uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Setup Coursier
-        uses: coursier/setup-action@v1
+        uses: coursier/setup-action@039f736548afa5411c1382f40a5bd9c2d30e0383 # 
v1.3.9
 
       - name: Enable jvm-opts
         run: cp .jvmopts-ci .jvmopts
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index a48240c00..327765ffd 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -26,25 +26,25 @@ jobs:
         PEKKO_VERSION: ['default', 'main', '1.0.x']
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
         with:
           fetch-depth: 0
           fetch-tags: true
 
       - name: Set up JDK ${{ matrix.JDK }}
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: ${{ matrix.JDK }}
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1          
+        uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Cache Build Target
-        uses: actions/cache@v4
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: project/**/target
           key: build-target-${{ hashFiles('**/*.sbt', 
'project/build.properties', 'project/**/*.scala') }}
@@ -59,7 +59,7 @@ jobs:
         run: sbt -Dpekko.http.parallelExecution=false 
-Dpekko.test.timefactor=2 -Dpekko.build.pekko.version=${{ matrix.PEKKO_VERSION 
}} "++ ${{ matrix.SCALA_VERSION }}" mimaReportBinaryIssues test
 
       - name: Upload test results
-        uses: actions/upload-artifact@v4  # upload test results
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 
# v4.6.2
         if: success() || failure()        # run this step even if previous 
step failed
         with:
           name: test-results-${{ matrix.JDK }}-${{ matrix.SCALA_VERSION }}-${{ 
matrix.PEKKO_VERSION }}
diff --git a/.github/workflows/publish-1.0-docs.yml 
b/.github/workflows/publish-1.0-docs.yml
index 85ec05584..7c4462e94 100644
--- a/.github/workflows/publish-1.0-docs.yml
+++ b/.github/workflows/publish-1.0-docs.yml
@@ -27,23 +27,23 @@ jobs:
     if: github.repository == 'apache/pekko-http'
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
         with:
           fetch-depth: 0
           fetch-tags: true
           ref: 1.0.x
 
       - name: Set up JDK 8
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: 8
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Build Documentation
         run: |-
@@ -88,4 +88,4 @@ jobs:
           remote_host: ${{ secrets.NIGHTLIES_RSYNC_HOST }}
           remote_port: ${{ secrets.NIGHTLIES_RSYNC_PORT }}
           remote_user: ${{ secrets.NIGHTLIES_RSYNC_USER }}
-          remote_key: ${{ secrets.NIGHTLIES_RSYNC_KEY }}          
+          remote_key: ${{ secrets.NIGHTLIES_RSYNC_KEY }}
diff --git a/.github/workflows/publish-1.0-snapshots.yml 
b/.github/workflows/publish-1.0-snapshots.yml
index 681b6b8b9..88a9ac58c 100644
--- a/.github/workflows/publish-1.0-snapshots.yml
+++ b/.github/workflows/publish-1.0-snapshots.yml
@@ -20,23 +20,23 @@ jobs:
     if: github.repository == 'apache/pekko-http'
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
         with:
           fetch-depth: 0
           fetch-tags: true
           ref: 1.0.x
 
       - name: Set up JDK 8
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: 8
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Install graphviz
         run: sudo apt-get install -y graphviz
diff --git a/.github/workflows/publish-1.1-docs.yml 
b/.github/workflows/publish-1.1-docs.yml
index e38ba3c2f..997d81dad 100644
--- a/.github/workflows/publish-1.1-docs.yml
+++ b/.github/workflows/publish-1.1-docs.yml
@@ -27,23 +27,23 @@ jobs:
     if: github.repository == 'apache/pekko-http'
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
         with:
           fetch-depth: 0
           fetch-tags: true
           ref: 1.1.x
 
       - name: Set up JDK 8
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: 8
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Build Documentation
         run: |-
@@ -88,4 +88,4 @@ jobs:
           remote_host: ${{ secrets.NIGHTLIES_RSYNC_HOST }}
           remote_port: ${{ secrets.NIGHTLIES_RSYNC_PORT }}
           remote_user: ${{ secrets.NIGHTLIES_RSYNC_USER }}
-          remote_key: ${{ secrets.NIGHTLIES_RSYNC_KEY }}          
+          remote_key: ${{ secrets.NIGHTLIES_RSYNC_KEY }}
diff --git a/.github/workflows/publish-1.1-snapshots.yml 
b/.github/workflows/publish-1.1-snapshots.yml
index 3ddcc47a3..403fc6ba6 100644
--- a/.github/workflows/publish-1.1-snapshots.yml
+++ b/.github/workflows/publish-1.1-snapshots.yml
@@ -20,23 +20,23 @@ jobs:
     if: github.repository == 'apache/pekko-http'
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
         with:
           fetch-depth: 0
           fetch-tags: true
           ref: 1.1.x
 
       - name: Set up JDK 8
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: 8
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Install graphviz
         run: sudo apt-get install -y graphviz
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 87852ebe0..92bd88601 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -29,22 +29,22 @@ jobs:
     if: github.repository == 'apache/pekko-http'
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
         with:
           fetch-depth: 0
           fetch-tags: true
 
       - name: Set up JDK 8
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: 8
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Install graphviz
         run: sudo apt-get install -y graphviz
@@ -62,22 +62,22 @@ jobs:
     if: github.repository == 'apache/pekko-http'
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
         with:
           fetch-depth: 0
           fetch-tags: true
 
       - name: Set up JDK 8
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: 8
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Build Documentation
         run: |-
diff --git a/.github/workflows/scala-steward.yml 
b/.github/workflows/scala-steward.yml
index 2c098192d..35f8b4bab 100644
--- a/.github/workflows/scala-steward.yml
+++ b/.github/workflows/scala-steward.yml
@@ -29,7 +29,7 @@ jobs:
     if: github.repository == 'apache/pekko-http'
     steps:
       - name: Launch Scala Steward
-        uses: scala-steward-org/scala-steward-action@v2
+        uses: 
scala-steward-org/scala-steward-action@5021652c555c5724af574758b78ea5be49640007 
# v2.75.0
         env:
           JAVA_OPTS: "-Xmx4g"
         with:
diff --git a/.github/workflows/validate-and-test.yml 
b/.github/workflows/validate-and-test.yml
index bd2b34a89..b222b5cd8 100644
--- a/.github/workflows/validate-and-test.yml
+++ b/.github/workflows/validate-and-test.yml
@@ -26,25 +26,25 @@ jobs:
     if: github.repository == 'apache/pekko-http'
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
         with:
           fetch-depth: 0
           fetch-tags: true
 
       - name: Set up Scala on JDK 8
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: 8
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Cache Build Target
-        uses: actions/cache@v4
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: project/**/target
           key: build-target-${{ hashFiles('**/*.sbt', 
'project/build.properties', 'project/**/*.scala') }}
@@ -74,25 +74,25 @@ jobs:
         JDK: [8, 11]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
         with:
           fetch-depth: 0
           fetch-tags: true
 
       - name: Set up JDK ${{ matrix.JDK }}
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: ${{ matrix.JDK }}
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
-  
+        uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9
+
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Cache Build Target
-        uses: actions/cache@v4
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: project/**/target
           key: build-target-${{ hashFiles('**/*.sbt', 
'project/build.properties', 'project/**/*.scala') }}
@@ -114,7 +114,7 @@ jobs:
         run: sbt -Dpekko.http.parallelExecution=false 
-Dpekko.test.timefactor=2 ++${{ matrix.SCALA_VERSION }} mimaReportBinaryIssues 
test
 
       - name: Upload test results
-        uses: actions/upload-artifact@v4  # upload test results
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 
# v4.6.2
         if: success() || failure()        # run this step even if previous 
step failed
         with:
           name: test-results-${{ matrix.JDK }}-${{ matrix.SCALA_VERSION }}


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to