From 8b7040ce1decf230f75f339cbe207eaf43faddd8 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 20 Jul 2026 22:19:58 +0000 Subject: [PATCH] chore(deps): pin dependencies --- .github/actions/build-test-pack-deploy/action.yml | 6 +++--- .github/workflows/release.yml | 2 +- .github/workflows/validate-pr-title.yml | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/actions/build-test-pack-deploy/action.yml b/.github/actions/build-test-pack-deploy/action.yml index 34d4a6a..0a61b62 100644 --- a/.github/actions/build-test-pack-deploy/action.yml +++ b/.github/actions/build-test-pack-deploy/action.yml @@ -94,20 +94,20 @@ runs: - name: Login to Octopus Deploy if: github.event.pull_request.head.repo.fork != true && (! contains(github.ref, '/dependabot/')) - uses: OctopusDeploy/login@v2 + uses: OctopusDeploy/login@e39e03d07630f363bdccd6c7ad4eb28e0ea8a184 # v2 with: server: ${{ inputs.octopus-url }} service_account_id: 42e00747-07e1-4214-979c-af3381e6d951 - name: Push to Octopus - uses: OctopusDeploy/push-package-action@v4 + uses: OctopusDeploy/push-package-action@c97226f7dc0e4fa3bd2fba9b5b30b2ac8a32048c # v4 if: github.event.pull_request.head.repo.fork != true && (! contains(github.ref, '/dependabot/')) with: packages: | ${{ steps.bundle.outputs.path }} - name: Create Release in Octopus - uses: OctopusDeploy/create-release-action@v4 + uses: OctopusDeploy/create-release-action@f4d652ab820942f2c32b66984f29c67285cab2b4 # v4 if: github.event.pull_request.head.repo.fork != true && (! contains(github.ref, '/dependabot/')) with: project: "OpenFeature Java Provider" diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 012fc22..3c31a52 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -16,7 +16,7 @@ jobs: pull-requests: write runs-on: ubuntu-latest steps: - - uses: googleapis/release-please-action@v5 + - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5 id: release with: token: ${{ secrets.RELEASE_PLEASE_TOKEN }} diff --git a/.github/workflows/validate-pr-title.yml b/.github/workflows/validate-pr-title.yml index 104e2df..6043557 100644 --- a/.github/workflows/validate-pr-title.yml +++ b/.github/workflows/validate-pr-title.yml @@ -17,6 +17,6 @@ jobs: pull-requests: read steps: - - uses: amannn/action-semantic-pull-request@v6 + - uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} \ No newline at end of file