From 20db0e2ca6e17b36d85ae2abeb47748680d17876 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 6 Aug 2026 05:41:12 +0000 Subject: [PATCH] Pin dependencies --- .github/workflows/build-all-and-publish.yml | 36 ++++++++++----------- .github/workflows/docs.yml | 14 ++++---- .github/workflows/test.yml | 6 ++-- 3 files changed, 28 insertions(+), 28 deletions(-) diff --git a/.github/workflows/build-all-and-publish.yml b/.github/workflows/build-all-and-publish.yml index de5c70f..2e4b7ae 100644 --- a/.github/workflows/build-all-and-publish.yml +++ b/.github/workflows/build-all-and-publish.yml @@ -56,18 +56,18 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: submodules: true fetch-depth: 0 - name: Setup Zulu JDK 7 - uses: actions/setup-java@v5 + uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 with: distribution: zulu java-version: '7' - name: Setup Temurin JDK 21 - uses: actions/setup-java@v5 + uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 with: distribution: temurin java-version: '21' @@ -90,7 +90,7 @@ jobs: package - name: Upload native library - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: natives-linux-${{ matrix.arch }} path: target/classes/net/jpountz/util/linux/*/liblz4-java.so @@ -113,19 +113,19 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: submodules: true fetch-depth: 0 - name: Setup Zulu JDK 7 - uses: actions/setup-java@v5 + uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 if: ${{ matrix.fullbuild }} with: distribution: zulu java-version: '7' - name: Setup Temurin JDK 21 - uses: actions/setup-java@v5 + uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 with: distribution: temurin java-version: '21' @@ -148,7 +148,7 @@ jobs: verify - name: Upload native library - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: natives-darwin-${{ matrix.arch }} path: target/classes/net/jpountz/util/darwin/${{ matrix.arch }}/liblz4-java.dylib @@ -159,18 +159,18 @@ jobs: runs-on: windows-latest steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: submodules: true fetch-depth: 0 - name: Setup Zulu JDK 7 - uses: actions/setup-java@v5 + uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 with: distribution: zulu java-version: '7' - name: Setup Temurin JDK 21 - uses: actions/setup-java@v5 + uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 with: distribution: temurin java-version: '21' @@ -199,7 +199,7 @@ jobs: verify - name: Upload native library - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: natives-windows-amd64 path: target/classes/net/jpountz/util/windows/amd64/liblz4-java.dll @@ -211,20 +211,20 @@ jobs: needs: [ linux, macos, windows ] steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: submodules: true fetch-depth: 0 - name: Setup Zulu JDK 7 - uses: actions/setup-java@v5 + uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 with: distribution: zulu java-version: '7' # with central credentials - name: Setup Temurin JDK 21 (publish) - uses: actions/setup-java@v5 + uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 if: github.event_name == 'release' || inputs.publish with: distribution: temurin @@ -237,7 +237,7 @@ jobs: server-password: CENTRAL_TOKEN_PASSWORD # without central credentials - name: Setup Temurin JDK 21 - uses: actions/setup-java@v5 + uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 if: github.event_name != 'release' && !inputs.publish with: distribution: temurin @@ -245,7 +245,7 @@ jobs: cache: maven - name: Download natives - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: path: assemble/natives # Note: downloads all artifacts; we will merge their folder contents @@ -297,7 +297,7 @@ jobs: if: github.event_name != 'release' && !inputs.publish - name: Upload final JAR - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: lz4-java-all-platforms path: target/lz4-java-*.jar diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 6b6892a..2dcbf67 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -16,17 +16,17 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: fetch-depth: 0 - name: Setup Temurin JDK 21 - uses: actions/setup-java@v5 + uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 with: distribution: temurin java-version: '21' cache: maven - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7 - name: Install just run: sudo apt install -y just - name: Build documentation (explicit selected version) @@ -37,7 +37,7 @@ jobs: run: cd docs && just all - name: Publish production if: github.event_name == 'release' - uses: cloudflare/wrangler-action@v3 + uses: cloudflare/wrangler-action@9acf94ace14e7dc412b076f2c5c20b8ce93c79cd # v3 id: cf_publish_production with: apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }} @@ -45,7 +45,7 @@ jobs: command: pages deploy docs/target/site/ --project-name=lz4-java-yawk-at --branch=main - name: Publish preview if: github.event_name != 'release' - uses: cloudflare/wrangler-action@v3 + uses: cloudflare/wrangler-action@9acf94ace14e7dc412b076f2c5c20b8ce93c79cd # v3 id: cf_publish_preview with: apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }} @@ -53,11 +53,11 @@ jobs: command: pages deploy docs/target/site/ --project-name=lz4-java-yawk-at - name: Check PR if: github.event_name != 'release' - uses: 8BitJonny/gh-get-current-pr@3.0.0 + uses: 8BitJonny/gh-get-current-pr@08e737c57a3a4eb24cec6487664b243b77eb5e36 # 3.0.0 id: pr - name: Comment on PR if: steps.pr.outputs.pr_found - uses: thollander/actions-comment-pull-request@v3 + uses: thollander/actions-comment-pull-request@24bffb9b452ba05a4f3f77933840a6a841d1b32b # v3 with: message: ":rocket: Preview deployed to ${{steps.cf_publish_preview.outputs.deployment-url}}" comment-tag: deployment diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 5119631..79aa765 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -26,18 +26,18 @@ jobs: -Dmaven.compiler.target=8 steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: submodules: true fetch-depth: 0 - name: Setup Zulu JDK 7 if: matrix.runs-on == 'ubuntu-24.04' - uses: actions/setup-java@v5 + uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 with: distribution: zulu java-version: '7' - name: Setup Temurin JDK 21 - uses: actions/setup-java@v5 + uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 with: distribution: temurin java-version: '21'