From 0b1777c0275b334e0b6cb8699087a3cdf4cb1c29 Mon Sep 17 00:00:00 2001 From: MacOS Date: Mon, 20 Jul 2026 09:01:29 +0200 Subject: [PATCH 1/2] build(verify-poms-workflow): pin checkout action with commit hash --- .github/workflows/verify-poms.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/verify-poms.yml b/.github/workflows/verify-poms.yml index 0d6f5b3f3..4253c25f8 100644 --- a/.github/workflows/verify-poms.yml +++ b/.github/workflows/verify-poms.yml @@ -18,7 +18,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Copy CI gradle.properties run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties From 7a47e79e9fee484e0f2970e9332d6665d80452b4 Mon Sep 17 00:00:00 2001 From: MacOS Date: Mon, 20 Jul 2026 09:02:34 +0200 Subject: [PATCH 2/2] build(verify-poms-workflow): pin setup-java action with commit hash --- .github/workflows/verify-poms.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/verify-poms.yml b/.github/workflows/verify-poms.yml index 4253c25f8..13ab4529f 100644 --- a/.github/workflows/verify-poms.yml +++ b/.github/workflows/verify-poms.yml @@ -24,7 +24,7 @@ jobs: run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties - name: Set up JDK 25 - uses: actions/setup-java@v5 + uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0 with: distribution: 'zulu' java-version: 25