This is an automated email from the ASF dual-hosted git repository.

engelen pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/pekko.git


The following commit(s) were added to refs/heads/main by this push:
     new 1035de65ec CI: github actions use sha instead of version (#1858)
1035de65ec is described below

commit 1035de65ec1cf58c88fcb8b992e9b4385616979a
Author: PJ Fanning <[email protected]>
AuthorDate: Wed May 21 15:50:08 2025 +0100

    CI: github actions use sha instead of version (#1858)
---
 .github/workflows/binary-compatibility-checks.yml |  4 ++--
 .github/workflows/build-test-prValidation.yml     | 16 ++++++++--------
 .github/workflows/dependency-graph.yml            |  4 ++--
 .github/workflows/format.yml                      |  2 +-
 .github/workflows/generate-doc-check.yml          |  4 ++--
 .github/workflows/headers.yml                     |  4 ++--
 .github/workflows/link-validator.yml              |  6 +++---
 .github/workflows/nightly-1.0-builds.yml          | 12 ++++++------
 .github/workflows/nightly-1.1-builds.yml          | 12 ++++++------
 .github/workflows/nightly-builds-aeron.yml        |  4 ++--
 .github/workflows/nightly-builds.yml              | 12 ++++++------
 .github/workflows/publish-1.0-docs.yml            |  4 ++--
 .github/workflows/publish-1.0-nightly.yml         |  4 ++--
 .github/workflows/publish-1.1-docs.yml            |  4 ++--
 .github/workflows/publish-1.1-nightly.yml         |  4 ++--
 .github/workflows/publish-nightly.yml             |  4 ++--
 .github/workflows/scala-steward.yml               |  2 +-
 .github/workflows/scala3-build.yml                |  4 ++--
 .github/workflows/timing-tests.yml                |  4 ++--
 19 files changed, 55 insertions(+), 55 deletions(-)

diff --git a/.github/workflows/binary-compatibility-checks.yml 
b/.github/workflows/binary-compatibility-checks.yml
index 605f160454..7288abc531 100644
--- a/.github/workflows/binary-compatibility-checks.yml
+++ b/.github/workflows/binary-compatibility-checks.yml
@@ -50,10 +50,10 @@ jobs:
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Enable jvm-opts
         run: cp .jvmopts-ci .jvmopts
diff --git a/.github/workflows/build-test-prValidation.yml 
b/.github/workflows/build-test-prValidation.yml
index 33dfb4bfbd..21047c21ea 100644
--- a/.github/workflows/build-test-prValidation.yml
+++ b/.github/workflows/build-test-prValidation.yml
@@ -33,7 +33,7 @@ jobs:
           fetch-tags: true
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Setup Java 8
         uses: actions/setup-java@v4
@@ -42,7 +42,7 @@ jobs:
           java-version: 8
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Code style check
         run: |-
@@ -71,10 +71,10 @@ jobs:
           java-version: 8
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1          
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7  
        
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Enable jvm-opts
         run: cp .jvmopts-ci .jvmopts
@@ -134,10 +134,10 @@ jobs:
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Enable jvm-opts
         run: cp .jvmopts-ci .jvmopts
@@ -177,10 +177,10 @@ jobs:
           java-version: 21
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Enable jvm-opts
         run: cp .jvmopts-ci .jvmopts
diff --git a/.github/workflows/dependency-graph.yml 
b/.github/workflows/dependency-graph.yml
index 3de87d9158..f3b7f54c65 100644
--- a/.github/workflows/dependency-graph.yml
+++ b/.github/workflows/dependency-graph.yml
@@ -35,8 +35,8 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
-      - uses: scalacenter/sbt-dependency-submission@v3
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
+      - uses: 
scalacenter/sbt-dependency-submission@64084844d2b0a9b6c3765f33acde2fbe3f5ae7d3 
# v3.1.0
         with:
           configs-ignore: provided optional test TestJdk9 compile-internal 
runtime-internal pr-validation multi-jvm scala-tool scala-doc-tool
           modules-ignore: pekko-bench-jmh_2.12 pekko-docs_2.12 
pekko-bench-jmh_2.13 pekko-docs_2.13 pekko-bench-jmh_3 pekko-docs_3
diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml
index ff4dab71df..25bb8e162d 100644
--- a/.github/workflows/format.yml
+++ b/.github/workflows/format.yml
@@ -35,6 +35,6 @@ jobs:
           persist-credentials: false
 
       - name: Check project is formatted
-        uses: jrouly/scalafmt-native-action@v4
+        uses: 
jrouly/scalafmt-native-action@14620cde093e5ff6bfbbecd4f638370024287b9d # v4
         with:
           arguments: '--list --mode diff-ref=origin/main'
diff --git a/.github/workflows/generate-doc-check.yml 
b/.github/workflows/generate-doc-check.yml
index e06690e48c..0eb34c3d0a 100644
--- a/.github/workflows/generate-doc-check.yml
+++ b/.github/workflows/generate-doc-check.yml
@@ -42,10 +42,10 @@ jobs:
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Install Graphviz
         run: |-
diff --git a/.github/workflows/headers.yml b/.github/workflows/headers.yml
index 3da7690149..3ac2d521bc 100644
--- a/.github/workflows/headers.yml
+++ b/.github/workflows/headers.yml
@@ -37,10 +37,10 @@ jobs:
           java-version: 8
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Check headers
         env:
diff --git a/.github/workflows/link-validator.yml 
b/.github/workflows/link-validator.yml
index 4ad79d3005..ac0b36b442 100644
--- a/.github/workflows/link-validator.yml
+++ b/.github/workflows/link-validator.yml
@@ -36,13 +36,13 @@ jobs:
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
     
       - name: Setup Coursier
-        uses: coursier/setup-action@v1
+        uses: coursier/setup-action@039f736548afa5411c1382f40a5bd9c2d30e0383 # 
v1.3.9
 
       - name: Create the Pekko site
         env:
diff --git a/.github/workflows/nightly-1.0-builds.yml 
b/.github/workflows/nightly-1.0-builds.yml
index 8e5f89a697..9980e995ed 100644
--- a/.github/workflows/nightly-1.0-builds.yml
+++ b/.github/workflows/nightly-1.0-builds.yml
@@ -35,10 +35,10 @@ jobs:
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Enable jvm-opts
         run: cp .jvmopts-ci .jvmopts
@@ -89,10 +89,10 @@ jobs:
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Enable jvm-opts
         run: cp .jvmopts-ci .jvmopts
@@ -139,10 +139,10 @@ jobs:
           java-version: ${{ matrix.javaVersion }}
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Enable jvm-opts
         run: cp .jvmopts-ci .jvmopts
diff --git a/.github/workflows/nightly-1.1-builds.yml 
b/.github/workflows/nightly-1.1-builds.yml
index 5146703514..e6020e34b0 100644
--- a/.github/workflows/nightly-1.1-builds.yml
+++ b/.github/workflows/nightly-1.1-builds.yml
@@ -35,10 +35,10 @@ jobs:
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Enable jvm-opts
         run: cp .jvmopts-ci .jvmopts
@@ -90,10 +90,10 @@ jobs:
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Enable jvm-opts
         run: cp .jvmopts-ci .jvmopts
@@ -141,10 +141,10 @@ jobs:
           java-version: ${{ matrix.javaVersion }}
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Enable jvm-opts
         run: cp .jvmopts-ci .jvmopts
diff --git a/.github/workflows/nightly-builds-aeron.yml 
b/.github/workflows/nightly-builds-aeron.yml
index da22ee871c..48ffc147ce 100644
--- a/.github/workflows/nightly-builds-aeron.yml
+++ b/.github/workflows/nightly-builds-aeron.yml
@@ -42,10 +42,10 @@ jobs:
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Enable jvm-opts
         run: cp .jvmopts-ci .jvmopts
diff --git a/.github/workflows/nightly-builds.yml 
b/.github/workflows/nightly-builds.yml
index 6ac548a5a8..dbfae972bd 100644
--- a/.github/workflows/nightly-builds.yml
+++ b/.github/workflows/nightly-builds.yml
@@ -26,10 +26,10 @@ jobs:
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Enable jvm-opts
         run: cp .jvmopts-ci .jvmopts
@@ -80,10 +80,10 @@ jobs:
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Enable jvm-opts
         run: cp .jvmopts-ci .jvmopts
@@ -132,10 +132,10 @@ jobs:
           java-version: ${{ matrix.javaVersion }}
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Enable jvm-opts
         run: cp .jvmopts-ci .jvmopts
diff --git a/.github/workflows/publish-1.0-docs.yml 
b/.github/workflows/publish-1.0-docs.yml
index ae20f25ea3..b026df3461 100644
--- a/.github/workflows/publish-1.0-docs.yml
+++ b/.github/workflows/publish-1.0-docs.yml
@@ -46,10 +46,10 @@ jobs:
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Install Graphviz
         run: |-
diff --git a/.github/workflows/publish-1.0-nightly.yml 
b/.github/workflows/publish-1.0-nightly.yml
index 916b6e7583..ca23de2afa 100644
--- a/.github/workflows/publish-1.0-nightly.yml
+++ b/.github/workflows/publish-1.0-nightly.yml
@@ -49,10 +49,10 @@ jobs:
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Install Graphviz
         run: |-
diff --git a/.github/workflows/publish-1.1-docs.yml 
b/.github/workflows/publish-1.1-docs.yml
index 443819038c..53c472461a 100644
--- a/.github/workflows/publish-1.1-docs.yml
+++ b/.github/workflows/publish-1.1-docs.yml
@@ -46,10 +46,10 @@ jobs:
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Install Graphviz
         run: |-
diff --git a/.github/workflows/publish-1.1-nightly.yml 
b/.github/workflows/publish-1.1-nightly.yml
index 28151ca3d2..c9dcb62b59 100644
--- a/.github/workflows/publish-1.1-nightly.yml
+++ b/.github/workflows/publish-1.1-nightly.yml
@@ -49,10 +49,10 @@ jobs:
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Install Graphviz
         run: |-
diff --git a/.github/workflows/publish-nightly.yml 
b/.github/workflows/publish-nightly.yml
index b1307cad48..86f91d74bd 100644
--- a/.github/workflows/publish-nightly.yml
+++ b/.github/workflows/publish-nightly.yml
@@ -48,10 +48,10 @@ jobs:
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Install Graphviz
         run: |-
diff --git a/.github/workflows/scala-steward.yml 
b/.github/workflows/scala-steward.yml
index a678638336..f22d716463 100644
--- a/.github/workflows/scala-steward.yml
+++ b/.github/workflows/scala-steward.yml
@@ -33,7 +33,7 @@ jobs:
     if: github.repository == 'apache/pekko'
     steps:
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
       - name: Launch Scala Steward
         uses: scala-steward-org/scala-steward-action@v2
         env:
diff --git a/.github/workflows/scala3-build.yml 
b/.github/workflows/scala3-build.yml
index d8ce70b355..5427e42b12 100644
--- a/.github/workflows/scala3-build.yml
+++ b/.github/workflows/scala3-build.yml
@@ -51,10 +51,10 @@ jobs:
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Enable jvm-opts
         run: cp .jvmopts-ci .jvmopts
diff --git a/.github/workflows/timing-tests.yml 
b/.github/workflows/timing-tests.yml
index 42d11bff78..ae6685f534 100644
--- a/.github/workflows/timing-tests.yml
+++ b/.github/workflows/timing-tests.yml
@@ -36,10 +36,10 @@ jobs:
           java-version: 11
 
       - name: Install sbt
-        uses: sbt/setup-sbt@v1
+        uses: sbt/setup-sbt@26ab4b0fa1c47fa62fc1f6e51823a658fb6c760c # v1.1.7
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6
+        uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # 
v6.4.7
 
       - name: Enable jvm-opts
         run: cp .jvmopts-ci .jvmopts


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to