chore(ci): pin GitHub Actions to specific versions

.github/workflows/maven.yml

@@ -8,9 +8,9 @@ permissions:
 
 on:
   push:
-    branches: [ master ]
+    branches: [master]
   pull_request:
-    branches: [ master ]
+    branches: [master]
 
 env:
   JAVA_VERSION: 21
@@ -19,24 +19,24 @@ jobs:
   verify:
     runs-on: ubuntu-latest
     steps:
-    - name: Checkout repository
-      uses: actions/checkout@v4
+      - name: Checkout repository
+        uses: actions/checkout@v4.2.2
 
-    - name: Set up OpenJDK ${{ env.JAVA_VERSION }}
-      uses: actions/setup-java@v4
-      with:
-        java-version: ${{ env.JAVA_VERSION }}
-        distribution: 'temurin'
-        cache: 'maven'
+      - name: Set up OpenJDK ${{ env.JAVA_VERSION }}
+        uses: actions/setup-java@v4.7.1
+        with:
+          java-version: ${{ env.JAVA_VERSION }}
+          distribution: "temurin"
+          cache: "maven"
 
-    - name: Compile and verify with Maven
-      run: mvn verify --file pom.xml
+      - name: Compile and verify with Maven
+        run: mvn verify --file pom.xml
 
-    - name: Upload JaCoCo coverage report artifact
-      uses: actions/upload-artifact@v4
-      with:
-        name: jacoco.xml
-        path: ./target/site/jacoco/jacoco.xml
+      - name: Upload JaCoCo coverage report artifact
+        uses: actions/upload-artifact@v4.6.2
+        with:
+          name: jacoco.xml
+          path: ./target/site/jacoco/jacoco.xml
 
   coverage:
     needs: verify
@@ -45,24 +45,24 @@ jobs:
       matrix:
         service: [codecov, codacy]
     steps:
-    - name: Checkout repository
-      uses: actions/checkout@v4
+      - name: Checkout repository
+        uses: actions/checkout@v4.2.2
 
-    - name: Download JaCoCo coverage report artifact
-      uses: actions/download-artifact@v4
-      with:
-        name: jacoco.xml
+      - name: Download JaCoCo coverage report artifact
+        uses: actions/download-artifact@v4.3.0
+        with:
+          name: jacoco.xml
 
-    - name: Upload JaCoCo coverage report to Codecov
-      if: matrix.service == 'codecov'
-      uses: codecov/codecov-action@v5
-      with:
-        token: ${{ secrets.CODECOV_TOKEN }}
-        files: jacoco.xml
+      - name: Upload JaCoCo coverage report to Codecov
+        if: matrix.service == 'codecov'
+        uses: codecov/codecov-action@v5.4.3
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          files: jacoco.xml
 
-    - name: Upload JaCoCo coverage report to Codacy
-      if: matrix.service == 'codacy'
-      uses: codacy/codacy-coverage-reporter-action@v1
-      with:
-        project-token: ${{ secrets.CODACY_PROJECT_TOKEN }}
-        force-coverage-parser: jacoco -r jacoco.xml
+      - name: Upload JaCoCo coverage report to Codacy
+        if: matrix.service == 'codacy'
+        uses: codacy/codacy-coverage-reporter-action@v1.3.0
+        with:
+          project-token: ${{ secrets.CODACY_PROJECT_TOKEN }}
+          force-coverage-parser: jacoco -r jacoco.xml