Skip to content

Commit 2741e53

Browse files
renovate[bot]renovate[bot]
authored
Pin dependencies
1 parent c9e61b5 commit 2741e53

3 files changed

Lines changed: 42 additions & 42 deletions

File tree

‎.devcontainer/devcontainer.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "Java",
3-
"image": "mcr.microsoft.com/devcontainers/java:11",
3+
"image": "mcr.microsoft.com/devcontainers/java:11@sha256:79ad86fd64f4b0915b5b1c105560e1ed733fc90fd1dfaf4d0ecb2dcc8d61df5a",
44
"features": {
55
"ghcr.io/devcontainers/features/java:1": {
66
"version": "none",

‎.github/workflows/ci.yml‎

Lines changed: 34 additions & 34 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141
matrix:
4242
java: ['11', '8']
4343
steps:
44-
- uses: actions/checkout@v5
44+
- uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
4545

4646
# Pinned to v4, not v5: v5.5.0 generates a settings.xml that force-disables Maven's
4747
# interactive mode, with no opt-out. ci.js's collectConfiguration() (used by
@@ -51,7 +51,7 @@ jobs:
5151
# from stdin. With that disabled, Maven never reads the prompt, produces zero
5252
# output, and the whole build fails immediately on the very first pom.xml. Revisit
5353
# only alongside rewriting ci.js's Maven-invocation mechanism, not by re-bumping this.
54-
- uses: actions/setup-java@v4
54+
- uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4
5555
with:
5656
distribution: temurin
5757
java-version: ${{ matrix.java }}
@@ -64,7 +64,7 @@ jobs:
6464

6565
- name: Upload test results
6666
if: always()
67-
uses: actions/upload-artifact@v6
67+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
6868
with:
6969
name: test-results-jdk${{ matrix.java }}
7070
path: test-results/junit
@@ -78,7 +78,7 @@ jobs:
7878
# hundreds of tests doesn't turn that page into a very long scroll.
7979
- name: Publish test results
8080
if: always()
81-
uses: mikepenz/action-junit-report@v5
81+
uses: mikepenz/action-junit-report@3585e9575db828022551b4231f165eb59a0e74e3 # v5
8282
with:
8383
check_name: Unit Tests (jdk ${{ matrix.java }})
8484
report_paths: test-results/junit/*.xml
@@ -91,7 +91,7 @@ jobs:
9191
# this matrix leg uploads the build-output artifact.
9292
- name: Upload build output
9393
if: matrix.java == '11'
94-
uses: actions/upload-artifact@v6
94+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
9595
with:
9696
name: build-output
9797
retention-days: 3
@@ -110,7 +110,7 @@ jobs:
110110
111111
- name: Upload coverage to Codecov
112112
if: matrix.java == '11'
113-
uses: codecov/codecov-action@v6
113+
uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v6
114114
with:
115115
flags: unittests
116116
fail_ci_if_error: false
@@ -121,9 +121,9 @@ jobs:
121121
runs-on: ubuntu-latest
122122
timeout-minutes: 20
123123
steps:
124-
- uses: actions/checkout@v5
124+
- uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
125125

126-
- uses: actions/setup-node@v5
126+
- uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
127127
with:
128128
node-version: '16.17.1'
129129

@@ -139,7 +139,7 @@ jobs:
139139

140140
- name: Upload test results
141141
if: always()
142-
uses: actions/upload-artifact@v6
142+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
143143
with:
144144
name: karma-junit
145145
path: ui.apps/karma-junit
@@ -148,7 +148,7 @@ jobs:
148148
# Runs on every outcome - see the build job's Publish test results step for why.
149149
- name: Publish test results
150150
if: always()
151-
uses: mikepenz/action-junit-report@v5
151+
uses: mikepenz/action-junit-report@3585e9575db828022551b4231f165eb59a0e74e3 # v5
152152
with:
153153
check_name: Unit Tests (karma)
154154
report_paths: ui.apps/karma-junit/*.xml
@@ -158,7 +158,7 @@ jobs:
158158
fail_on_failure: false
159159

160160
- name: Upload coverage to Codecov
161-
uses: codecov/codecov-action@v6
161+
uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v6
162162
with:
163163
flags: karma
164164
fail_ci_if_error: false
@@ -169,9 +169,9 @@ jobs:
169169
runs-on: ubuntu-latest
170170
timeout-minutes: 20
171171
steps:
172-
- uses: actions/checkout@v5
172+
- uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
173173

174-
- uses: actions/setup-node@v5
174+
- uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
175175
with:
176176
node-version: '16.20.0'
177177

@@ -185,7 +185,7 @@ jobs:
185185

186186
- name: Upload test results
187187
if: always()
188-
uses: actions/upload-artifact@v6
188+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
189189
with:
190190
name: jest-test-results
191191
path: react-components/test-results
@@ -194,7 +194,7 @@ jobs:
194194
# Runs on every outcome - see the build job's Publish test results step for why.
195195
- name: Publish test results
196196
if: always()
197-
uses: mikepenz/action-junit-report@v5
197+
uses: mikepenz/action-junit-report@3585e9575db828022551b4231f165eb59a0e74e3 # v5
198198
with:
199199
check_name: Unit Tests (jest react-components)
200200
report_paths: react-components/test-results/*.xml
@@ -204,7 +204,7 @@ jobs:
204204
fail_on_failure: false
205205

206206
- name: Upload coverage to Codecov
207-
uses: codecov/codecov-action@v6
207+
uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v6
208208
with:
209209
flags: jest
210210
fail_ci_if_error: false
@@ -215,9 +215,9 @@ jobs:
215215
runs-on: ubuntu-latest
216216
timeout-minutes: 20
217217
steps:
218-
- uses: actions/checkout@v5
218+
- uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
219219

220-
- uses: actions/setup-node@v5
220+
- uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
221221
with:
222222
node-version: '16.17.1'
223223

@@ -240,7 +240,7 @@ jobs:
240240

241241
- name: Upload test results
242242
if: always()
243-
uses: actions/upload-artifact@v6
243+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
244244
with:
245245
name: jest-product-recs-test-results
246246
path: extensions/product-recs/react-components/test-results
@@ -249,7 +249,7 @@ jobs:
249249
# Runs on every outcome - see the build job's Publish test results step for why.
250250
- name: Publish test results
251251
if: always()
252-
uses: mikepenz/action-junit-report@v5
252+
uses: mikepenz/action-junit-report@3585e9575db828022551b4231f165eb59a0e74e3 # v5
253253
with:
254254
check_name: Unit Tests (jest extensions/product-recs)
255255
report_paths: extensions/product-recs/react-components/test-results/*.xml
@@ -259,7 +259,7 @@ jobs:
259259
fail_on_failure: false
260260

261261
- name: Upload coverage to Codecov
262-
uses: codecov/codecov-action@v6
262+
uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v6
263263
with:
264264
flags: jest
265265
fail_ci_if_error: false
@@ -270,9 +270,9 @@ jobs:
270270
runs-on: ubuntu-latest
271271
timeout-minutes: 20
272272
steps:
273-
- uses: actions/checkout@v5
273+
- uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
274274

275-
- uses: actions/setup-node@v5
275+
- uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
276276
with:
277277
node-version: '16.17.1'
278278

@@ -290,14 +290,14 @@ jobs:
290290
# read and no real reason to run.
291291
- name: Upload test results
292292
if: always()
293-
uses: actions/upload-artifact@v6
293+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
294294
with:
295295
name: jest-epc-test-results
296296
path: extensions/experience-platform-connector/test-results
297297
if-no-files-found: ignore
298298

299299
- name: Upload coverage to Codecov
300-
uses: codecov/codecov-action@v6
300+
uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v6
301301
with:
302302
flags: jest
303303
fail_ci_if_error: false
@@ -366,7 +366,7 @@ jobs:
366366
# docker exec into it while it's still up.
367367
KEEP_AEM_CONTAINER: ${{ inputs.debug_enabled }}
368368
steps:
369-
- uses: actions/checkout@v5
369+
- uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
370370

371371
# These steps run directly on the bare runner (they're not `uses:` inside the qp
372372
# container), so this path is the runner's own ~/.m2/repository - the same directory
@@ -393,14 +393,14 @@ jobs:
393393
# '1' until that Variable is created. restore-keys stays scoped to the same
394394
# CACHE_VERSION - it never falls back across a version bump.
395395
- name: Restore Maven repository cache
396-
uses: actions/cache/restore@v5
396+
uses: actions/cache/restore@caa296126883cff596d87d8935842f9db880ef25 # v5
397397
with:
398398
path: ~/.m2/repository
399399
key: test-aem-m2-${{ vars.CACHE_VERSION || '1' }}-${{ hashFiles('**/pom.xml') }}
400400
restore-keys: |
401401
test-aem-m2-${{ vars.CACHE_VERSION || '1' }}-
402402
403-
- uses: actions/download-artifact@v7
403+
- uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
404404
with:
405405
name: build-output
406406

@@ -434,7 +434,7 @@ jobs:
434434
# see the build job's Publish test results step.
435435
- name: Publish integration test results
436436
if: always() && matrix.type == 'integration'
437-
uses: mikepenz/action-junit-report@v5
437+
uses: mikepenz/action-junit-report@3585e9575db828022551b4231f165eb59a0e74e3 # v5
438438
with:
439439
check_name: Tests (${{ matrix.type == 'integration' && 'integration-test' || 'selenium-chrome' }}-${{ matrix.label }})
440440
report_paths: it/http/target/failsafe-reports/TEST-*.xml
@@ -445,7 +445,7 @@ jobs:
445445

446446
- name: Publish selenium test results
447447
if: always() && matrix.type == 'selenium'
448-
uses: mikepenz/action-junit-report@v5
448+
uses: mikepenz/action-junit-report@3585e9575db828022551b4231f165eb59a0e74e3 # v5
449449
with:
450450
check_name: Tests (${{ matrix.type == 'integration' && 'integration-test' || 'selenium-chrome' }}-${{ matrix.label }})
451451
report_paths: ui.tests/test-module/reports/**/*.xml
@@ -458,14 +458,14 @@ jobs:
458458
# whatever it managed to download for the next attempt (see restore step's comment).
459459
- name: Save Maven repository cache
460460
if: always()
461-
uses: actions/cache/save@v5
461+
uses: actions/cache/save@caa296126883cff596d87d8935842f9db880ef25 # v5
462462
with:
463463
path: ~/.m2/repository
464464
key: test-aem-m2-${{ vars.CACHE_VERSION || '1' }}-${{ hashFiles('**/pom.xml') }}
465465

466466
- name: Upload test results
467467
if: always()
468-
uses: actions/upload-artifact@v6
468+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
469469
with:
470470
name: ${{ matrix.type }}-${{ matrix.aem }}-reports
471471
if-no-files-found: ignore
@@ -479,7 +479,7 @@ jobs:
479479
480480
- name: Upload coverage to Codecov
481481
if: matrix.type == 'integration'
482-
uses: codecov/codecov-action@v6
482+
uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v6
483483
with:
484484
flags: integration
485485
fail_ci_if_error: false
@@ -495,7 +495,7 @@ jobs:
495495
# to get inside it.
496496
- name: Debug via SSH (tmate)
497497
if: always() && github.event_name == 'workflow_dispatch' && inputs.debug_enabled
498-
uses: mxschmitt/action-tmate@v3
498+
uses: mxschmitt/action-tmate@35b54afac29c97fb54faba5b513f8fbd1882f113 # v3
499499
with:
500500
limit-access-to-actor: true
501501
timeout-minutes: 30

‎.github/workflows/release.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
runs-on: ubuntu-latest
3131
timeout-minutes: 30
3232
steps:
33-
- uses: actions/checkout@v5
33+
- uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
3434

3535
# Pinned to v4 in all three jobs in this file, not v5: v5.5.0 generates a
3636
# settings.xml that force-disables Maven's interactive mode, with no opt-out.
@@ -40,7 +40,7 @@ jobs:
4040
# from stdin. This job and `release` don't call that themselves, but are kept in
4141
# sync for consistency - revisit only alongside rewriting ci.js's Maven-invocation
4242
# mechanism, not by re-bumping this.
43-
- uses: actions/setup-java@v4
43+
- uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4
4444
with:
4545
distribution: temurin
4646
java-version: '11'
@@ -55,9 +55,9 @@ jobs:
5555
runs-on: ubuntu-latest
5656
timeout-minutes: 30
5757
steps:
58-
- uses: actions/checkout@v5
58+
- uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
5959

60-
- uses: actions/setup-java@v4
60+
- uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4
6161
with:
6262
distribution: temurin
6363
java-version: '11'
@@ -94,9 +94,9 @@ jobs:
9494
runs-on: ubuntu-latest
9595
timeout-minutes: 30
9696
steps:
97-
- uses: actions/checkout@v5
97+
- uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
9898

99-
- uses: actions/setup-java@v4
99+
- uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4
100100
with:
101101
distribution: temurin
102102
java-version: '11'
@@ -107,7 +107,7 @@ jobs:
107107
run: mvn -B clean verify
108108

109109
- name: Set up deploy key
110-
uses: webfactory/ssh-agent@v0.10.0
110+
uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
111111
with:
112112
ssh-private-key: ${{ secrets.DEPLOY_QUERIES_SSH_KEY }}
113113

0 commit comments

Comments
 (0)