From f5dc1c1ad32d1df08ceb40f590d1b1952dbb4a2d Mon Sep 17 00:00:00 2001
From: Valery Kharseko <vharseko@3a-systems.ru>
Date: Wed, 23 Sep 2026 12:50:09 +0000
Subject: [PATCH] Add dependabot config and pin GitHub Actions to a commit SHA (#1073)
---
.github/workflows/release.yml | 24 ++++++++++++------------
1 files changed, 12 insertions(+), 12 deletions(-)
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c5fc05b..06336a2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -50,12 +50,12 @@
run: |
sudo apt-get update
sudo apt-get install -y rpm
- - uses: actions/checkout@v6
+ - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
fetch-depth: 0
submodules: recursive
- name: Set up Java for publishing to Maven Central Repository OSS
- uses: actions/setup-java@v5
+ uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
with:
java-version: ${{ github.event.workflow_run.head_branch == 'sustaining/4.10.x' && '8' || '11'}}
distribution: 'temurin'
@@ -63,7 +63,7 @@
server-username: MAVEN_USERNAME
server-password: MAVEN_PASSWORD
- name: Cache Maven packages
- uses: actions/cache@v5
+ uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0
with:
path: ~/.m2/repository
key: ${{ runner.os }}-m2-repository-${{ hashFiles('**/pom.xml') }}
@@ -93,7 +93,7 @@
# built on Windows), so it does not have to rebuild opendj-server-legacy.
- name: Upload the server zip for the MSI job
continue-on-error: true
- uses: actions/upload-artifact@v7
+ uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: release-server-zip
retention-days: 1
@@ -120,7 +120,7 @@
target/checkout/opendj-doc-generated-ref/target/*.zip
target/checkout/opendj-dsml-servlet/target/*.war
target/checkout/opendj-rest2ldap-servlet/target/*.war
- - uses: actions/checkout@v6
+ - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
continue-on-error: true
with:
repository: ${{ github.repository }}.wiki
@@ -143,7 +143,7 @@
git push --quiet --force
git push --quiet --force origin ${{ github.event.inputs.releaseVersion }}
- - uses: actions/checkout@v6
+ - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
continue-on-error: true
with:
repository: OpenIdentityPlatform/doc.openidentityplatform.org
@@ -174,12 +174,12 @@
needs:
- release-maven
steps:
- - uses: actions/checkout@v6
+ - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
ref: ${{ github.event.inputs.releaseVersion }}
submodules: recursive
- name: Set up Java
- uses: actions/setup-java@v5
+ uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
with:
java-version: '11'
distribution: 'temurin'
@@ -188,7 +188,7 @@
# and saving that under the key build-maven restores from would seed every later
# Windows build with it.
- name: Cache Maven packages
- uses: actions/cache/restore@v5
+ uses: actions/cache/restore@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0
with:
path: ~/.m2/repository
key: ${{ runner.os }}-m2-repository-${{ hashFiles('**/pom.xml') }}
@@ -204,7 +204,7 @@
wix --version
wix extension add -g WixToolset.UI.wixext/5.0.2 || true
- name: Download the server zip built by release-maven
- uses: actions/download-artifact@v8
+ uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with:
name: release-server-zip
path: server-zip
@@ -246,7 +246,7 @@
contents: read
packages: write
steps:
- - uses: actions/checkout@v6
+ - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
ref: ${{ github.event.inputs.releaseVersion }}
fetch-depth: 1
@@ -298,7 +298,7 @@
contents: read
packages: write
steps:
- - uses: actions/checkout@v6
+ - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
ref: ${{ github.event.inputs.releaseVersion }}
fetch-depth: 1
--
Gitblit v1.10.0