From 63c275cb9be9408db25b95e122a6f8f9ddf048dd Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=D0=90=D0=BB=D0=B5=D0=BA=D1=81=D0=B0=D0=BD=D0=B4=D1=8A?= =?UTF-8?q?=D1=80=20=D0=9A=D1=83=D1=80=D1=82=D0=B0=D0=BA=D0=BE=D0=B2?= Date: Wed, 22 Apr 2026 09:48:56 +0000 Subject: [PATCH] Fix dependabot for SHA-pinned actions Dependabot doesn't do updates if: * SHA doesn't have vMAJOR.MINOR comment * SHA has only vMAJOR Updated setup-maven to v5.1 to prevent warnings about deprecated Nodejs 20. For others without version comment - such is added. --- .github/workflows/checkDependencies.yml | 2 +- .github/workflows/checkMergeCommits.yml | 2 +- .github/workflows/checkVersions.yml | 2 +- .github/workflows/cleanCode.yml | 2 +- .github/workflows/codeQLworkflow.yml | 2 +- .github/workflows/mavenBuild.yml | 2 +- .github/workflows/publishTestResults.yml | 4 ++-- .github/workflows/updateTarget.yml | 2 +- 8 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/checkDependencies.yml b/.github/workflows/checkDependencies.yml index 2bdbfa78d61..94615233ef8 100644 --- a/.github/workflows/checkDependencies.yml +++ b/.github/workflows/checkDependencies.yml @@ -78,7 +78,7 @@ jobs: fetch-depth: 0 ref: master - name: Set up Maven - uses: stCarolas/setup-maven@d6af6abeda15e98926a57b5aa970a96bb37f97d1 # v5 + uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1 with: maven-version: ${{ inputs.mavenVersion }} - name: Set up JDK diff --git a/.github/workflows/checkMergeCommits.yml b/.github/workflows/checkMergeCommits.yml index cff097269e8..b0c86f2204d 100644 --- a/.github/workflows/checkMergeCommits.yml +++ b/.github/workflows/checkMergeCommits.yml @@ -14,7 +14,7 @@ jobs: pull-requests: read steps: - name: Block Merge Commits - uses: Morishiri/block-merge-commits-action@a4554c78def8d874966a8d1e20e2971121443755 + uses: Morishiri/block-merge-commits-action@a4554c78def8d874966a8d1e20e2971121443755 # v1.0.1 with: repo-token: ${{ secrets.GITHUB_TOKEN }} - name: Update Message diff --git a/.github/workflows/checkVersions.yml b/.github/workflows/checkVersions.yml index 4c0abe6d53f..944691e52f6 100644 --- a/.github/workflows/checkVersions.yml +++ b/.github/workflows/checkVersions.yml @@ -64,7 +64,7 @@ jobs: version-check-${{ runner.os }}-maven- - name: Set up Maven - uses: stCarolas/setup-maven@d6af6abeda15e98926a57b5aa970a96bb37f97d1 # v5 + uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1 with: maven-version: 3.9.14 diff --git a/.github/workflows/cleanCode.yml b/.github/workflows/cleanCode.yml index 48771a2f588..50c84bbfabf 100644 --- a/.github/workflows/cleanCode.yml +++ b/.github/workflows/cleanCode.yml @@ -115,7 +115,7 @@ jobs: fetch-depth: 0 ref: ${{ inputs.branch }} - name: Set up Maven - uses: stCarolas/setup-maven@d6af6abeda15e98926a57b5aa970a96bb37f97d1 # v5 + uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1 if: ${{ fromJson(steps.list-prs.outputs.prs)[9] == null }} with: maven-version: ${{ inputs.mavenVersion }} diff --git a/.github/workflows/codeQLworkflow.yml b/.github/workflows/codeQLworkflow.yml index 3348662aa24..86feab52a95 100644 --- a/.github/workflows/codeQLworkflow.yml +++ b/.github/workflows/codeQLworkflow.yml @@ -78,7 +78,7 @@ jobs: distribution: 'temurin' cache: maven - name: Set up Maven - uses: stCarolas/setup-maven@d6af6abeda15e98926a57b5aa970a96bb37f97d1 # v5 + uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1 with: maven-version: ${{ inputs.mavenVersion }} diff --git a/.github/workflows/mavenBuild.yml b/.github/workflows/mavenBuild.yml index 5754b38c225..23946e6b41b 100644 --- a/.github/workflows/mavenBuild.yml +++ b/.github/workflows/mavenBuild.yml @@ -73,7 +73,7 @@ jobs: distribution: 'temurin' cache: maven - name: Set up Maven - uses: stCarolas/setup-maven@d6af6abeda15e98926a57b5aa970a96bb37f97d1 # v5 + uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1 with: maven-version: ${{ inputs.mavenVersion }} diff --git a/.github/workflows/publishTestResults.yml b/.github/workflows/publishTestResults.yml index 0da53ea9859..43ad41e7dee 100644 --- a/.github/workflows/publishTestResults.yml +++ b/.github/workflows/publishTestResults.yml @@ -72,7 +72,7 @@ jobs: - name: Create badge if: github.ref == 'refs/heads/master' && inputs.gist-url != '' - uses: emibcn/badge-action@f9150fde070fcca0c4e832437611b44838fcd325 + uses: emibcn/badge-action@f9150fde070fcca0c4e832437611b44838fcd325 # v2.0.4 with: label: Tests status: '${{ fromJSON( steps.test-results.outputs.json ).formatted.stats.tests_succ }} passed, ${{ fromJSON( steps.test-results.outputs.json ).formatted.stats.tests_fail }} failed' @@ -81,7 +81,7 @@ jobs: - name: Upload badge to Gist if: github.ref == 'refs/heads/master' && inputs.gist-url != '' - uses: andymckay/append-gist-action@ab30bf28df67017c7ad696500b218558c7c04db3 + uses: andymckay/append-gist-action@ab30bf28df67017c7ad696500b218558c7c04db3 # 0.3 with: token: ${{ secrets.gist-token }} gistURL: ${{ inputs.gist-url }} diff --git a/.github/workflows/updateTarget.yml b/.github/workflows/updateTarget.yml index af82912564e..3f1ae253f8b 100644 --- a/.github/workflows/updateTarget.yml +++ b/.github/workflows/updateTarget.yml @@ -30,7 +30,7 @@ jobs: fetch-depth: 0 ref: ${{ inputs.branch }} - name: Set up Maven - uses: stCarolas/setup-maven@d6af6abeda15e98926a57b5aa970a96bb37f97d1 # v5 + uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1 with: maven-version: 3.9.14 - name: Set up JDK