You are viewing a plain text version of this content. The canonical link for it is here.
Posted to geb-notifications@groovy.apache.org by jo...@apache.org on 2026/09/22 17:01:28 UTC
(groovy-geb) 01/04: pin remaining github actions to commit SHAs and update to latest
This is an automated email from the ASF dual-hosted git repository.
jonnybot0 pushed a commit to branch github-security/pin-actions
in repository https://gitbox.apache.org/repos/asf/groovy-geb.git
commit 4a67e414fdb630aefc42bb08bf7d99733899d14d
Author: Jonny Carter <jc...@adaptavist.com>
AuthorDate: Tue Sep 22 11:52:05 2026 -0500
pin remaining github actions to commit SHAs and update to latest
actions/checkout v6 -> v7.0.1
actions/setup-java v5 -> v6.0.1
actions/upload-artifact v6 -> v7.0.1
gradle/wrapper-validation-action v3 -> v3.5.0
gradle/actions/setup-gradle stays on v5.0.2: v6 moves caching into a
proprietary component with separate terms of use.
Co-Authored-By: Claude Fable 5.1 <no...@anthropic.com>
---
.github/workflows/build-check.yml | 6 +++---
.github/workflows/check-manual.yml | 6 +++---
.github/workflows/dockerised-cross-browser.yml | 6 +++---
.github/workflows/gradle-wrapper-validation.yml | 4 ++--
.github/workflows/license-check.yml | 6 +++---
.github/workflows/local-browser.yml | 6 +++---
6 files changed, 17 insertions(+), 17 deletions(-)
diff --git a/.github/workflows/build-check.yml b/.github/workflows/build-check.yml
index 40086a43..55917f34 100644
--- a/.github/workflows/build-check.yml
+++ b/.github/workflows/build-check.yml
@@ -30,8 +30,8 @@ jobs:
env:
DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
steps:
- - uses: actions/checkout@v6
- - uses: actions/setup-java@v5
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+ - uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
with:
distribution: 'zulu'
java-version: ${{ matrix.java }}
@@ -43,7 +43,7 @@ jobs:
run: ./gradlew -Pci --no-daemon --no-build-cache check -x rat # rat in separate workflow for fast feedback
timeout-minutes: 60
- name: Upload reports
- uses: actions/upload-artifact@v6
+ uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
if: always()
with:
name: build-reports-${{ matrix.java }}
diff --git a/.github/workflows/check-manual.yml b/.github/workflows/check-manual.yml
index c95e3ed7..30400f63 100644
--- a/.github/workflows/check-manual.yml
+++ b/.github/workflows/check-manual.yml
@@ -30,8 +30,8 @@ jobs:
env:
DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
steps:
- - uses: actions/checkout@v6
- - uses: actions/setup-java@v5
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+ - uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
with:
distribution: 'zulu'
java-version: ${{ matrix.java }}
@@ -41,7 +41,7 @@ jobs:
run: ./gradlew --parallel -Pci --no-daemon :doc:manual:build -x rat # rat in separate workflow for fast feedback
timeout-minutes: 5
- name: Upload reports
- uses: actions/upload-artifact@v6
+ uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
if: always()
with:
name: build-reports-${{ matrix.java }}
diff --git a/.github/workflows/dockerised-cross-browser.yml b/.github/workflows/dockerised-cross-browser.yml
index 067e36fd..4798ca0a 100644
--- a/.github/workflows/dockerised-cross-browser.yml
+++ b/.github/workflows/dockerised-cross-browser.yml
@@ -30,8 +30,8 @@ jobs:
env:
DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
steps:
- - uses: actions/checkout@v6
- - uses: actions/setup-java@v5
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+ - uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
with:
distribution: 'zulu'
java-version: ${{ matrix.java }}
@@ -41,7 +41,7 @@ jobs:
run: ./gradlew --no-daemon --max-workers 4 --parallel -Pci allDockerisedCrossBrowserTests -x rat # rat in separate workflow for fast feedback
timeout-minutes: 60
- name: Upload reports
- uses: actions/upload-artifact@v6
+ uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
if: always()
with:
name: build-reports-${{ matrix.java }}
diff --git a/.github/workflows/gradle-wrapper-validation.yml b/.github/workflows/gradle-wrapper-validation.yml
index 89ed2828..9b3358d2 100644
--- a/.github/workflows/gradle-wrapper-validation.yml
+++ b/.github/workflows/gradle-wrapper-validation.yml
@@ -35,5 +35,5 @@ jobs:
name: "Validation"
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@v6
- - uses: gradle/wrapper-validation-action@v3
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+ - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
diff --git a/.github/workflows/license-check.yml b/.github/workflows/license-check.yml
index e83cc998..94b33bb8 100644
--- a/.github/workflows/license-check.yml
+++ b/.github/workflows/license-check.yml
@@ -26,8 +26,8 @@ jobs:
env:
DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
steps:
- - uses: actions/checkout@v6
- - uses: actions/setup-java@v5
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+ - uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
with:
distribution: 'zulu'
java-version: 21
@@ -37,7 +37,7 @@ jobs:
run: ./gradlew --no-daemon rat checkLicense depUp
timeout-minutes: 60
- name: Upload reports
- uses: actions/upload-artifact@v6
+ uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
if: always()
with:
name: build-reports
diff --git a/.github/workflows/local-browser.yml b/.github/workflows/local-browser.yml
index 28f8a87b..1c9b7680 100644
--- a/.github/workflows/local-browser.yml
+++ b/.github/workflows/local-browser.yml
@@ -30,8 +30,8 @@ jobs:
env:
DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
steps:
- - uses: actions/checkout@v6
- - uses: actions/setup-java@v5
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+ - uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
with:
distribution: 'zulu'
java-version: ${{ matrix.java }}
@@ -41,7 +41,7 @@ jobs:
run: ./gradlew --no-daemon --max-workers 4 --parallel -p module -Pci localChromeTest -x rat # rat in separate workflow for fast feedback
timeout-minutes: 60
- name: Upload reports
- uses: actions/upload-artifact@v6
+ uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
if: always()
with:
name: build-reports-${{ matrix.java }}