(opennlp-addons) branch main updated: OPENNLP-1754 - Convert GH Action Tags into Pinned SHA

[rzo1]

This is an automated email from the ASF dual-hosted git repository.

rzo1 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/opennlp-addons.git


The following commit(s) were added to refs/heads/main by this push:
     new 8d979a6  OPENNLP-1754 - Convert GH Action Tags into Pinned SHA
8d979a6 is described below

commit 8d979a6fb4ff81edf6efe6415198480b1a27fac7
Author: Richard Zowalla <r...@apache.org>
AuthorDate: Tue Jun 24 11:28:32 2025 +0200

    OPENNLP-1754 - Convert GH Action Tags into Pinned SHA
---
 .github/workflows/license.yml | 8 ++++----
 .github/workflows/maven.yml   | 6 +++---
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/license.yml b/.github/workflows/license.yml
index b8a523b..8dbb929 100644
--- a/.github/workflows/license.yml
+++ b/.github/workflows/license.yml
@@ -26,15 +26,15 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
       - name: Set up JDK 17
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           java-version: '17'
           distribution: 'temurin'
 
       - name: Cache Maven packages
-        uses: actions/cache@v4
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: ~/.m2
           key: ${{ runner.os }}-master-m2-${{ hashFiles('**/pom.xml') }}
@@ -53,7 +53,7 @@ jobs:
           cat src/license/NOTICE.template target/DEPENDENCY-LICENSES > NOTICE
 
       - name: Create Pull Request after License Regeneration
-        uses: peter-evans/create-pull-request@v7
+        uses: 
peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # 
v7.0.8
         with:
           base: main
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index a071462..b8d5807 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -41,15 +41,15 @@ jobs:
             experimental: true
 
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/cache@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
       with:
         path: ~/.m2/repository
         key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
         restore-keys: |
           ${{ runner.os }}-maven-
     - name: Set up JDK ${{ matrix.java }}
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
       with:
         distribution: temurin
         java-version: ${{ matrix.java }}