From 4732537a11221149c0fe64aa19e1842ccfcad09c Mon Sep 17 00:00:00 2001 From: Arnout Engelen Date: Wed, 8 Oct 2025 15:46:42 +0200 Subject: [PATCH] pin github actions per https://infra.apache.org/github-actions-policy.html with octopin --- .github/workflows/build-test.yml | 8 ++++---- .github/workflows/format.yml | 2 +- .github/workflows/publish-nightly.yml | 6 +++--- .github/workflows/scala-steward.yml | 2 +- 4 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/build-test.yml b/.github/workflows/build-test.yml index ecd4989..98a877c 100644 --- a/.github/workflows/build-test.yml +++ b/.github/workflows/build-test.yml @@ -17,13 +17,13 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: # we don't know what commit the last tag was it's safer to get entire repo so previousStableVersion resolves fetch-depth: 0 - name: Setup Java 11 - uses: actions/setup-java@v5 + uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0 with: distribution: temurin java-version: 11 @@ -32,7 +32,7 @@ jobs: uses: sbt/setup-sbt@17575ea4e18dd928fe5968dbe32294b97923d65b # v1.1.13 - name: Cache Coursier cache - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # v6.4.7 + uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 6.4.7 - name: Test pekko-sample-cluster-java run: cd pekko-sample-cluster-java && sbt multi-jvm:test @@ -90,7 +90,7 @@ jobs: # Tests below require Minikube - name: Start minikube - uses: manusa/actions-setup-minikube@v2.12.0 + uses: manusa/actions-setup-minikube@a4e4e6a9358e4716d1398048e11660975c35dc54 # v2.12.0 with: driver: docker minikube version: 'v1.34.0' diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml index 31cea03..9b2e10d 100644 --- a/.github/workflows/format.yml +++ b/.github/workflows/format.yml @@ -29,7 +29,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout current branch (full) - uses: actions/checkout@v5 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/publish-nightly.yml b/.github/workflows/publish-nightly.yml index 41cf2cc..16a8689 100644 --- a/.github/workflows/publish-nightly.yml +++ b/.github/workflows/publish-nightly.yml @@ -32,19 +32,19 @@ jobs: if: github.repository == 'apache/pekko-samples' steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: # we don't know what commit the last tag was it's safer to get entire repo so previousStableVersion resolves fetch-depth: 0 - name: Setup Java 11 - uses: actions/setup-java@v4 + uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 with: distribution: temurin java-version: 11 - name: Cache Coursier cache - uses: coursier/cache-action@v6 + uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # v6.4.7 - name: Run docs gen run: cd docs-gen && sbt paradox diff --git a/.github/workflows/scala-steward.yml b/.github/workflows/scala-steward.yml index e5b69ba..d6e0a43 100644 --- a/.github/workflows/scala-steward.yml +++ b/.github/workflows/scala-steward.yml @@ -35,7 +35,7 @@ jobs: - name: Install sbt uses: sbt/setup-sbt@17575ea4e18dd928fe5968dbe32294b97923d65b # v1.1.13 - name: Launch Scala Steward - uses: scala-steward-org/scala-steward-action@v2 + uses: scala-steward-org/scala-steward-action@53d486a68877f4a6d1e110e8058fe21e593db356 # v2.77.0 env: JAVA_OPTS: "-XX:+UseG1GC -Xms4G -Xmx4G -Xss2M -XX:+AlwaysActAsServerClassMachine -XX:ReservedCodeCacheSize=256m -XX:MaxGCPauseMillis=750 -XX:+UseCompressedOops -XX:MetaspaceSize=512M" with: