This is an automated email from the ASF dual-hosted git repository.

rzo1 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/storm.git


The following commit(s) were added to refs/heads/master by this push:
     new f9930f45d Pin versions, fixes #8139
f9930f45d is described below

commit f9930f45ddd1999643221c3e50b101606ab9f6f1
Author: Richard Zowalla <[email protected]>
AuthorDate: Sat Aug 9 21:18:56 2025 +0200

    Pin versions, fixes #8139
---
 .github/workflows/maven.yaml     | 12 ++++++------
 .github/workflows/nightlies.yaml | 14 +++++++-------
 .github/workflows/snapshots.yaml | 12 ++++++------
 3 files changed, 19 insertions(+), 19 deletions(-)

diff --git a/.github/workflows/maven.yaml b/.github/workflows/maven.yaml
index 1bb4e1afe..703b9cbe6 100644
--- a/.github/workflows/maven.yaml
+++ b/.github/workflows/maven.yaml
@@ -33,27 +33,27 @@ jobs:
         experimental: [false]
       fail-fast: false
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/cache@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
+      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
         with:
           path: ~/.m2/repository
           key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
           restore-keys: |
             ${{ runner.os }}-maven-
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # 
v5.6.0
         with:
           python-version: '3.10'
       - name: Set up Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # 
v4.4.0
         with:
           node-version: 20
       - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
+        uses: ruby/setup-ruby@2a7b30092b0caf9c046252510f9273b4875f3db9 # 
v1.254.0
         with:
           ruby-version: '2.7'
       - name: Set up JDK ${{ matrix.java }}
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: ${{ matrix.java }}
diff --git a/.github/workflows/nightlies.yaml b/.github/workflows/nightlies.yaml
index 8e822005c..70619b6ab 100644
--- a/.github/workflows/nightlies.yaml
+++ b/.github/workflows/nightlies.yaml
@@ -29,27 +29,27 @@ jobs:
     name: Upload to Nightly Builds
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/cache@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
+      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
         with:
           path: ~/.m2/repository
           key: nightlies-maven-${{ hashFiles('**/pom.xml') }}
           restore-keys: |
             nightlies-maven-
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # 
v5.6.0
         with:
           python-version: '3.10'
       - name: Set up Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # 
v4.4.0
         with:
           node-version: 16
       - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
+        uses: ruby/setup-ruby@2a7b30092b0caf9c046252510f9273b4875f3db9 # 
v1.254.0
         with:
           ruby-version: '2.7'
       - name: Set up JDK ${{ matrix.java }}
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: 20
@@ -60,7 +60,7 @@ jobs:
       - name: Package binaries
         run: mvn package -f storm-dist/binary/pom.xml -Dgpg.skip
       - name: Upload to nightlies.apache.org
-        uses: burnett01/[email protected]
+        uses: 
burnett01/rsync-deployments@0dc935cdecc5f5e571865e60d2a6cdc673704823 # 5.2
         with:
           switches: -avzh --update --delete --progress --include='*.zip' 
--include='*.tar.gz' --exclude='*'
           path: storm-dist/binary/final-package/target/
diff --git a/.github/workflows/snapshots.yaml b/.github/workflows/snapshots.yaml
index 6574062f2..a5fb8128c 100644
--- a/.github/workflows/snapshots.yaml
+++ b/.github/workflows/snapshots.yaml
@@ -29,27 +29,27 @@ jobs:
     name: Publish Snapshots
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/cache@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 
v4.2.2
+      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
         with:
           path: ~/.m2/repository
           key: snapshots-maven-${{ hashFiles('**/pom.xml') }}
           restore-keys: |
             snapshots-maven-
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # 
v5.6.0
         with:
           python-version: '3.10'
       - name: Set up Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # 
v4.4.0
         with:
           node-version: 16
       - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
+        uses: ruby/setup-ruby@2a7b30092b0caf9c046252510f9273b4875f3db9 # 
v1.254.0
         with:
           ruby-version: '2.7'
       - name: Set up JDK ${{ matrix.java }}
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # 
v4.7.1
         with:
           distribution: temurin
           java-version: 20

Reply via email to