chore(build): Specify exact versions of GitHub actions

mthmulders · Dec 25, 2023 · 639617f · 639617f
1 parent d8fbefc
commit 639617f
Show file tree

Hide file tree

Showing 3 changed files with 18 additions and 18 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -24,7 +24,7 @@ jobs:
         distribution: 'adopt'
         cache: maven
     - name: Cache Maven packages
-      uses: actions/cache@v3
+      uses: actions/cache@v3.0.2
       with:
         path: ~/.m2
         key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}

diff --git a/.github/workflows/early-access.yml b/.github/workflows/early-access.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: Download all build artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v3.0.2
 
       - name: Check out repository
         uses: actions/checkout@v4.1.1
@@ -44,7 +44,7 @@ jobs:
         uses: ilammy/msvc-dev-cmd@v1.12.1
 
       - name: Setup GraalVM
-        uses: graalvm/setup-graalvm@v1
+        uses: graalvm/setup-graalvm@v1.1.5.1
         with:
           distribution: 'graalvm'
           java-version: 17
@@ -74,7 +74,7 @@ jobs:
         if: matrix.os == 'ubuntu-latest'
 
       - name: Cache Maven packages
-        uses: actions/cache@v3
+        uses: actions/cache@v3.0.2
         with:
           path: ~/.m2
           key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -96,7 +96,7 @@ jobs:
         run: mvn -B -Pdist package -DskipTests
 
       - name: Upload build artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v3.1.3
         with:
           name: artifacts
           path: |
@@ -120,10 +120,10 @@ jobs:
         run: git checkout ${{ steps.head.outputs.content }}
 
       - name: Download all build artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v3.0.2
 
       - name: Cache Maven packages
-        uses: actions/cache@v3
+        uses: actions/cache@v3.3.2
         with:
           path: ~/.m2
           key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -136,7 +136,7 @@ jobs:
 
       - name: Capture JReleaser output
         if: always()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v3.1.3
         with:
           name: jreleaser-release-output
           retention-days: 7

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -28,7 +28,7 @@ jobs:
           distribution: 'adopt'
 
       - name: Cache Maven packages
-        uses: actions/cache@v3
+        uses: actions/cache@v3.3.2
         with:
           path: ~/.m2
           key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -56,7 +56,7 @@ jobs:
           echo $NEXT_VERSION > NEXT_VERSION
 
       - name: Upload version files
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v3.1.3
         with:
           name: artifacts
           path: |
@@ -85,7 +85,7 @@ jobs:
 
     steps:
       - name: Download all build artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v3.0.2
 
       - name: Read HEAD ref
         id: head
@@ -103,7 +103,7 @@ jobs:
         uses: ilammy/msvc-dev-cmd@v1.12.1
 
       - name: Setup GraalVM
-        uses: graalvm/setup-graalvm@v1
+        uses: graalvm/setup-graalvm@v1.1.5.1
         with:
           distribution: 'graalvm'
           java-version: 17
@@ -133,7 +133,7 @@ jobs:
         if: matrix.os == 'ubuntu-latest'
 
       - name: Cache Maven packages
-        uses: actions/cache@v3
+        uses: actions/cache@v3.3.2
         with:
           path: ~/.m2
           key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -155,7 +155,7 @@ jobs:
         run: mvn -B -Pdist package -DskipTests
 
       - name: Upload build artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v3.1.3
         with:
           name: artifacts
           path: |
@@ -171,7 +171,7 @@ jobs:
     steps:
       # must read HEAD before checkout
       - name: Download all build artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v3.0.2
 
       - name: Read HEAD ref
         id: head
@@ -202,7 +202,7 @@ jobs:
 
       # checkout will clobber downloaded artifacts; we have to download them again
       - name: Download all build artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v3.0.2
 
       - name: Set up Java
         uses: actions/setup-java@v3.13.0
@@ -211,7 +211,7 @@ jobs:
           distribution: 'adopt'
 
       - name: Cache Maven packages
-        uses: actions/cache@v3
+        uses: actions/cache@v3.3.2
         with:
           path: ~/.m2
           key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -236,7 +236,7 @@ jobs:
 
       - name: Capture JReleaser output
         if: always()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v3.1.3
         with:
           name: jreleaser-release-output
           retention-days: 7