(solr-operator) branch main updated: Pin all GitHub Actions to commit SHAs (#856)

[janhoy]

This is an automated email from the ASF dual-hosted git repository.

janhoy pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/solr-operator.git


The following commit(s) were added to refs/heads/main by this push:
     new 6d4a51a  Pin all GitHub Actions to commit SHAs (#856)
6d4a51a is described below

commit 6d4a51a4bf9d7be3ab3bd68031ea90662515c6d0
Author: Jan Høydahl <jan...@apache.org>
AuthorDate: Sat Oct 24 14:09:24 2026 +0200

    Pin all GitHub Actions to commit SHAs (#856)
---
 .github/workflows/check.yaml       | 6 +++---
 .github/workflows/e2e-tests.yaml   | 6 +++---
 .github/workflows/smoke-tests.yaml | 4 ++--
 .github/workflows/stale.yml        | 2 +-
 4 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml
index 47ddda4..ada959a 100644
--- a/.github/workflows/check.yaml
+++ b/.github/workflows/check.yaml
@@ -33,9 +33,9 @@ jobs:
 
     steps:
       # Setup
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # 
v4.4.0
       - name: Setup go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # 
v5.6.0
         with:
           go-version: ${{ matrix.go }}
 
@@ -43,7 +43,7 @@ jobs:
       - run: make clean
       - run: make install-dependencies
 
-      - uses: actions/cache@v4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           path: |
             ~/go/pkg/mod
diff --git a/.github/workflows/e2e-tests.yaml b/.github/workflows/e2e-tests.yaml
index 4b167bd..3d28e7a 100644
--- a/.github/workflows/e2e-tests.yaml
+++ b/.github/workflows/e2e-tests.yaml
@@ -53,9 +53,9 @@ jobs:
 
     steps:
       # Setup
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # 
v4.4.0
       - name: Setup go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # 
v5.6.0
         with:
           go-version: ${{ matrix.go-version }}
 
@@ -63,7 +63,7 @@ jobs:
 
       - name: Install dev dependencies
         id: cache-bin
-        uses: actions/cache@v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           path: bin
           key: ${{ runner.os }}-code-dependencies-${{ matrix.go-version }}-${{ 
hashFiles('Makefile') }}
diff --git a/.github/workflows/smoke-tests.yaml 
b/.github/workflows/smoke-tests.yaml
index de7a91e..ddff26e 100644
--- a/.github/workflows/smoke-tests.yaml
+++ b/.github/workflows/smoke-tests.yaml
@@ -51,9 +51,9 @@ jobs:
 
     steps:
       # Setup
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # 
v4.4.0
       - name: Setup go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # 
v5.6.0
         with:
           go-version: ${{ matrix.go }}
 
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 27fc53b..f84066b 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -18,7 +18,7 @@ jobs:
       pull-requests: write
       actions: write
     steps:
-      - uses: actions/stale@v10
+      - uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629 # v10.4.0
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}