From b1b06ddd73e6d799ead0f4cb125100e44168d84e Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 27 May 2026 18:06:17 +0000 Subject: [PATCH] Pin dependencies --- .github/workflows/check-sca.yml | 2 +- .github/workflows/unified-dogfooding.yml | 2 +- build-poetry/action.yml | 2 +- build-yarn/action.yml | 2 +- cache/action.yml | 2 +- code-signing/action.yml | 2 +- config-gradle/action.yml | 2 +- config-maven/action.yml | 2 +- config-npm/action.yml | 2 +- config-pip/action.yml | 2 +- 10 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/check-sca.yml b/.github/workflows/check-sca.yml index 9b17ec50..9158b7ea 100644 --- a/.github/workflows/check-sca.yml +++ b/.github/workflows/check-sca.yml @@ -23,4 +23,4 @@ jobs: environment: sca-checking steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: SonarSource/ci-github-actions/check-sca@master + - uses: SonarSource/ci-github-actions/check-sca@b329d397758373baddb6b290a5551b40d89530f7 # master diff --git a/.github/workflows/unified-dogfooding.yml b/.github/workflows/unified-dogfooding.yml index 8ec6df87..93eab435 100644 --- a/.github/workflows/unified-dogfooding.yml +++ b/.github/workflows/unified-dogfooding.yml @@ -14,7 +14,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Run IRIS Analysis - uses: SonarSource/unified-dogfooding-actions/run-iris@v1 + uses: SonarSource/unified-dogfooding-actions/run-iris@54cee68ff08f10645c757675c59d232063e0b947 # 1.0.0 with: primary_project_key: SonarSource_ci-github-actions primary_platform: SQC-EU diff --git a/build-poetry/action.yml b/build-poetry/action.yml index 43db36c0..7d1d7ab7 100644 --- a/build-poetry/action.yml +++ b/build-poetry/action.yml @@ -111,7 +111,7 @@ runs: with: host-actions-root: ${{ steps.set-path.outputs.host_actions_root }} - name: Cache local Poetry cache - uses: SonarSource/gh-action_cache@bdecdb711dbf5939d90c58d0fcadbfd0749301fa # v1.5.0 + uses: SonarSource/gh-action_cache@c5032b2d44e013b57458156ce27afdf1b94b0d8f # v1.5.1 if: inputs.disable-caching == 'false' with: path: ${{ github.workspace }}/${{ inputs.poetry-cache-dir }} diff --git a/build-yarn/action.yml b/build-yarn/action.yml index 64b51694..46aa4b28 100644 --- a/build-yarn/action.yml +++ b/build-yarn/action.yml @@ -122,7 +122,7 @@ runs: working_directory: ${{ inputs.working-directory }} - name: Cache Yarn dependencies - uses: SonarSource/gh-action_cache@bdecdb711dbf5939d90c58d0fcadbfd0749301fa # v1.5.0 + uses: SonarSource/gh-action_cache@c5032b2d44e013b57458156ce27afdf1b94b0d8f # v1.5.1 if: ${{ inputs.cache-yarn == 'true' && inputs.disable-caching != 'true' }} with: path: | diff --git a/cache/action.yml b/cache/action.yml index 23fb9fa5..1072a717 100644 --- a/cache/action.yml +++ b/cache/action.yml @@ -36,7 +36,7 @@ runs: echo "::warning:: This action is deprecated and will be removed in future releases." \ "Please migrate to using the SonarSource/gh-action_cache action directly." >&2 - - uses: SonarSource/gh-action_cache@bdecdb711dbf5939d90c58d0fcadbfd0749301fa # v1.5.0 + - uses: SonarSource/gh-action_cache@c5032b2d44e013b57458156ce27afdf1b94b0d8f # v1.5.1 id: cache with: path: ${{ inputs.path }} diff --git a/code-signing/action.yml b/code-signing/action.yml index 6a26936d..13f63026 100644 --- a/code-signing/action.yml +++ b/code-signing/action.yml @@ -24,7 +24,7 @@ runs: echo "JSIGN_CACHE_PATH=/tmp/jsign-cache" >> "$GITHUB_ENV" - name: Cache code signing tools - uses: SonarSource/gh-action_cache@bdecdb711dbf5939d90c58d0fcadbfd0749301fa # v1.5.0 + uses: SonarSource/gh-action_cache@c5032b2d44e013b57458156ce27afdf1b94b0d8f # v1.5.1 id: tools-cache with: path: | diff --git a/config-gradle/action.yml b/config-gradle/action.yml index 0a5d6a3a..ecd6ae4f 100644 --- a/config-gradle/action.yml +++ b/config-gradle/action.yml @@ -169,7 +169,7 @@ runs: run: echo "workflow_name=${WORKFLOW_NAME// /-}" >> "$GITHUB_OUTPUT" - name: Gradle Cache - uses: SonarSource/gh-action_cache@bdecdb711dbf5939d90c58d0fcadbfd0749301fa # v1.5.0 + uses: SonarSource/gh-action_cache@c5032b2d44e013b57458156ce27afdf1b94b0d8f # v1.5.1 if: steps.config-gradle-completed.outputs.skip != 'true' && inputs.disable-caching == 'false' with: path: ${{ inputs.cache-paths }} diff --git a/config-maven/action.yml b/config-maven/action.yml index a8c5e8b9..80c23a9e 100644 --- a/config-maven/action.yml +++ b/config-maven/action.yml @@ -180,7 +180,7 @@ runs: run: echo "workflow_name=${WORKFLOW_NAME// /-}" >> "$GITHUB_OUTPUT" - name: Cache local Maven repository - uses: SonarSource/gh-action_cache@bdecdb711dbf5939d90c58d0fcadbfd0749301fa # v1.5.0 + uses: SonarSource/gh-action_cache@c5032b2d44e013b57458156ce27afdf1b94b0d8f # v1.5.1 if: steps.config-maven-completed.outputs.skip != 'true' && inputs.disable-caching == 'false' with: path: ${{ inputs.cache-paths }} diff --git a/config-npm/action.yml b/config-npm/action.yml index b23d3394..84cf6b87 100644 --- a/config-npm/action.yml +++ b/config-npm/action.yml @@ -125,7 +125,7 @@ runs: run: echo "workflow_name=${WORKFLOW_NAME// /-}" >> "$GITHUB_OUTPUT" - name: Cache NPM dependencies - uses: SonarSource/gh-action_cache@bdecdb711dbf5939d90c58d0fcadbfd0749301fa # v1.5.0 + uses: SonarSource/gh-action_cache@c5032b2d44e013b57458156ce27afdf1b94b0d8f # v1.5.1 if: steps.config-npm-completed.outputs.skip != 'true' && inputs.disable-caching != 'true' && inputs.cache-npm == 'true' with: path: ~/.npm diff --git a/config-pip/action.yml b/config-pip/action.yml index 53059cf8..874ef828 100644 --- a/config-pip/action.yml +++ b/config-pip/action.yml @@ -100,7 +100,7 @@ runs: run: echo "workflow_name=${WORKFLOW_NAME// /-}" >> "$GITHUB_OUTPUT" - name: Cache pip dependencies - uses: SonarSource/gh-action_cache@bdecdb711dbf5939d90c58d0fcadbfd0749301fa # v1.5.0 + uses: SonarSource/gh-action_cache@c5032b2d44e013b57458156ce27afdf1b94b0d8f # v1.5.1 if: inputs.disable-caching == 'false' with: path: ${{ inputs.cache-paths }}