This is an automated email from the ASF dual-hosted git repository.

engelen pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/pekko-samples.git


The following commit(s) were added to refs/heads/main by this push:
     new 8d882b4  pin github actions (#140)
8d882b4 is described below

commit 8d882b41ff8781aba3d33a37636c853ed4939532
Author: Arnout Engelen <[email protected]>
AuthorDate: Wed Oct 8 16:18:44 2025 +0200

    pin github actions (#140)
    
    per https://infra.apache.org/github-actions-policy.html
    
    with octopin
---
 .github/workflows/build-test.yml      | 8 ++++----
 .github/workflows/format.yml          | 2 +-
 .github/workflows/publish-nightly.yml | 6 +++---
 .github/workflows/scala-steward.yml   | 2 +-
 4 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/build-test.yml b/.github/workflows/build-test.yml
index ecd4989..98a877c 100644
--- a/.github/workflows/build-test.yml
+++ b/.github/workflows/build-test.yml
@@ -17,13 +17,13 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # 
v5.0.0
         with:
           # we don't know what commit the last tag was it's safer to get 
entire repo so previousStableVersion resolves
           fetch-depth: 0
 
       - name: Setup Java 11
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # 
v5.0.0
         with:
           distribution: temurin
           java-version: 11
@@ -32,7 +32,7 @@ jobs:
         uses: sbt/setup-sbt@17575ea4e18dd928fe5968dbe32294b97923d65b # v1.1.13
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
6.4.7
 
       - name: Test pekko-sample-cluster-java
         run: cd pekko-sample-cluster-java && sbt multi-jvm:test
@@ -90,7 +90,7 @@ jobs:
 
       # Tests below require Minikube  
       - name: Start minikube
-        uses: manusa/[email protected]
+        uses: 
manusa/actions-setup-minikube@a4e4e6a9358e4716d1398048e11660975c35dc54 # v2.12.0
         with:
           driver: docker
           minikube version: 'v1.34.0'
diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml
index 31cea03..9b2e10d 100644
--- a/.github/workflows/format.yml
+++ b/.github/workflows/format.yml
@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout current branch (full)
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # 
v5.0.0
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/publish-nightly.yml 
b/.github/workflows/publish-nightly.yml
index 41cf2cc..16a8689 100644
--- a/.github/workflows/publish-nightly.yml
+++ b/.github/workflows/publish-nightly.yml
@@ -32,19 +32,19 @@ jobs:
     if: github.repository == 'apache/pekko-samples'
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # 
v5.0.0
         with:
           # we don't know what commit the last tag was it's safer to get 
entire repo so previousStableVersion resolves
           fetch-depth: 0
 
       - name: Setup Java 11
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: 11
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Run docs gen
         run: cd docs-gen && sbt paradox
diff --git a/.github/workflows/scala-steward.yml 
b/.github/workflows/scala-steward.yml
index e5b69ba..d6e0a43 100644
--- a/.github/workflows/scala-steward.yml
+++ b/.github/workflows/scala-steward.yml
@@ -35,7 +35,7 @@ jobs:
       - name: Install sbt
         uses: sbt/setup-sbt@17575ea4e18dd928fe5968dbe32294b97923d65b # v1.1.13
       - name: Launch Scala Steward
-        uses: scala-steward-org/scala-steward-action@v2
+        uses: 
scala-steward-org/scala-steward-action@53d486a68877f4a6d1e110e8058fe21e593db356 
# v2.77.0
         env:
           JAVA_OPTS: "-XX:+UseG1GC -Xms4G -Xmx4G -Xss2M 
-XX:+AlwaysActAsServerClassMachine -XX:ReservedCodeCacheSize=256m 
-XX:MaxGCPauseMillis=750 -XX:+UseCompressedOops -XX:MetaspaceSize=512M"
         with:


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to