This is an automated email from the ASF dual-hosted git repository.

engelen pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/pekko-persistence-dynamodb.git


The following commit(s) were added to refs/heads/main by this push:
     new 202c57b  Pin GitHub Actions (#218)
202c57b is described below

commit 202c57b4ff824b44cc386605951136b90b6f1d30
Author: Arnout Engelen <[email protected]>
AuthorDate: Mon Jun 16 15:34:52 2025 +0200

    Pin GitHub Actions (#218)
    
    with octopin
---
 .github/workflows/check-build-test.yml | 16 ++++++++--------
 .github/workflows/dependency-graph.yml |  6 +++---
 .github/workflows/format.yml           |  2 +-
 .github/workflows/headers.yml          |  8 ++++----
 .github/workflows/publish-nightly.yml  |  8 ++++----
 .github/workflows/scala-steward.yml    |  2 +-
 6 files changed, 21 insertions(+), 21 deletions(-)

diff --git a/.github/workflows/check-build-test.yml 
b/.github/workflows/check-build-test.yml
index 3ed54fd..548a32d 100644
--- a/.github/workflows/check-build-test.yml
+++ b/.github/workflows/check-build-test.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
         with:
           fetch-depth: 0
           fetch-tags: true
@@ -28,16 +28,16 @@ jobs:
           git checkout scratch
 
       - name: Setup Java 11
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: 11
     
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Compile all code with default compiler
         run: sbt "Test/compile"
@@ -57,7 +57,7 @@ jobs:
           - { java-version: 11, scala-version: 2.13, sbt-opts: 
'-J-XX:+UnlockExperimentalVMOptions -J-XX:+UseJVMCICompiler' }
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
         with:
           fetch-depth: 0
           fetch-tags: true
@@ -69,16 +69,16 @@ jobs:
           git checkout scratch
 
       - name: Setup Java ${{ matrix.java-version }}
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: ${{ matrix.java-version }}
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1          
+        uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9  
        
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Run tests with Scala ${{ matrix.scala-version }} and Java ${{ 
matrix.java-version }}
         run: sbt "++${{ matrix.scala-version }} test" ${{ matrix.sbt-opts }}
diff --git a/.github/workflows/dependency-graph.yml 
b/.github/workflows/dependency-graph.yml
index 7b4d723..25a85f2 100644
--- a/.github/workflows/dependency-graph.yml
+++ b/.github/workflows/dependency-graph.yml
@@ -8,6 +8,6 @@ jobs:
     name: Update Dependency Graph
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: sbt/setup-sbt@v1
-      - uses: scalacenter/sbt-dependency-submission@v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
+      - uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9
+      - uses: 
scalacenter/sbt-dependency-submission@64084844d2b0a9b6c3765f33acde2fbe3f5ae7d3 
# v3.1.0
diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml
index cd5fbf6..cddf42f 100644
--- a/.github/workflows/format.yml
+++ b/.github/workflows/format.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout current branch (full)
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
         with:
           fetch-depth: 0
           fetch-tags: true
diff --git a/.github/workflows/headers.yml b/.github/workflows/headers.yml
index 21d616a..1e20d4e 100644
--- a/.github/workflows/headers.yml
+++ b/.github/workflows/headers.yml
@@ -11,19 +11,19 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
 
       - name: Setup Java 11
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1          
+        uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9  
        
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Check headers
         run: |-
diff --git a/.github/workflows/publish-nightly.yml 
b/.github/workflows/publish-nightly.yml
index fa06731..0d40ab5 100644
--- a/.github/workflows/publish-nightly.yml
+++ b/.github/workflows/publish-nightly.yml
@@ -32,19 +32,19 @@ jobs:
     if: github.repository == 'apache/pekko-persistence-dynamodb'
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
         with:
           fetch-depth: 0
           fetch-tags: true
 
       - name: Setup Java 8
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: 8
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9
 
       - name: Publish to Apache Maven repo
         env:
@@ -53,4 +53,4 @@ jobs:
         run: sbt +publish
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
diff --git a/.github/workflows/scala-steward.yml 
b/.github/workflows/scala-steward.yml
index 930edb8..db45107 100644
--- a/.github/workflows/scala-steward.yml
+++ b/.github/workflows/scala-steward.yml
@@ -12,7 +12,7 @@ jobs:
     if: github.repository == 'apache/pekko-persistence-dynamodb'
     steps:
       - name: Launch Scala Steward
-        uses: scala-steward-org/scala-steward-action@v2
+        uses: 
scala-steward-org/scala-steward-action@5021652c555c5724af574758b78ea5be49640007 
# v2.75.0
         env:
           JAVA_OPTS: "-Xms1g -Xmx4g -Xss6M"
         with:


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to