diff --git a/.github/workflows/bugCatcher.yml b/.github/workflows/bugCatcher.yml index 303c0aae3..7165bbf20 100644 --- a/.github/workflows/bugCatcher.yml +++ b/.github/workflows/bugCatcher.yml @@ -18,7 +18,7 @@ jobs: environment: azure-prod steps: - name: Checkout code - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up JDK 21 uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4 diff --git a/.github/workflows/checkNextChangelog.yml b/.github/workflows/checkNextChangelog.yml index 527c7ac9c..0ccef46b8 100644 --- a/.github/workflows/checkNextChangelog.yml +++ b/.github/workflows/checkNextChangelog.yml @@ -15,7 +15,7 @@ jobs: steps: - name: Checkout base branch (main) - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: ref: ${{ github.event.pull_request.base.ref }} fetch-depth: 0 diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml index 23f23c4b8..c7a1b3a24 100644 --- a/.github/workflows/claude-code-review.yml +++ b/.github/workflows/claude-code-review.yml @@ -42,7 +42,7 @@ jobs: echo "number=$(echo "$PR_DATA" | jq -r .number)" >> "$GITHUB_OUTPUT" - name: Checkout repository - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: # Use the commit SHA instead of the branch ref to prevent # the branch from being moved between the API call and checkout diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 6bb99ff0f..4b7ce1687 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -31,7 +31,7 @@ jobs: actions: read # Required for Claude to read CI results on PRs steps: - name: Checkout repository - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 1 diff --git a/.github/workflows/concurrencyExecutionTests.yml b/.github/workflows/concurrencyExecutionTests.yml index edb92461e..60106835c 100644 --- a/.github/workflows/concurrencyExecutionTests.yml +++ b/.github/workflows/concurrencyExecutionTests.yml @@ -32,7 +32,7 @@ jobs: steps: - name: Checkout PR or Manual Dispatch - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: ref: ${{ github.event.pull_request.head.ref || inputs.branch || github.ref_name }} repository: ${{ github.event.pull_request.head.repo.full_name || inputs.repository || github.repository }} diff --git a/.github/workflows/coverageReport.yml b/.github/workflows/coverageReport.yml index 90f706e04..4d8a1f12a 100644 --- a/.github/workflows/coverageReport.yml +++ b/.github/workflows/coverageReport.yml @@ -14,7 +14,7 @@ jobs: labels: linux-ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 # Needed for coverage comparison ref: ${{ github.event.pull_request.head.ref || github.ref_name }} diff --git a/.github/workflows/dco-check.yml b/.github/workflows/dco-check.yml index cd3ad03de..d006027c9 100644 --- a/.github/workflows/dco-check.yml +++ b/.github/workflows/dco-check.yml @@ -16,7 +16,7 @@ jobs: name: Check DCO Sign-off steps: - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 # Fetch full history to check all commits ref: ${{ github.event.pull_request.head.ref }} diff --git a/.github/workflows/loggingTesting.yml b/.github/workflows/loggingTesting.yml index 13093ba21..1a7d101a0 100644 --- a/.github/workflows/loggingTesting.yml +++ b/.github/workflows/loggingTesting.yml @@ -33,7 +33,7 @@ jobs: run: git config --system core.longpaths true - name: Checkout code - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: ref: ${{ inputs.branch || github.ref }} diff --git a/.github/workflows/prCheck.yml b/.github/workflows/prCheck.yml index 02071f179..1391e81ea 100644 --- a/.github/workflows/prCheck.yml +++ b/.github/workflows/prCheck.yml @@ -30,7 +30,7 @@ jobs: distribution: 'adopt' - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: ref: ${{ github.event.pull_request.head.ref || github.ref_name }} repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }} @@ -79,7 +79,7 @@ jobs: run: git config --system core.longpaths true - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: ref: ${{ github.event.pull_request.head.ref || github.ref_name }} repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }} @@ -195,7 +195,7 @@ jobs: run: git config --system core.longpaths true - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: ref: ${{ github.event.pull_request.head.ref || github.ref_name }} repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }} diff --git a/.github/workflows/prCheckJDK8.yml b/.github/workflows/prCheckJDK8.yml index dfee670f8..870767488 100644 --- a/.github/workflows/prCheckJDK8.yml +++ b/.github/workflows/prCheckJDK8.yml @@ -38,7 +38,7 @@ jobs: distribution: 'adopt' - name: Checkout code - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: ref: ${{ github.event.pull_request.head.ref || inputs.branch }} repository: ${{ github.event.pull_request.head.repo.full_name || inputs.repository }} diff --git a/.github/workflows/prIntegrationTests.yml b/.github/workflows/prIntegrationTests.yml index 945a378fd..110046ae8 100644 --- a/.github/workflows/prIntegrationTests.yml +++ b/.github/workflows/prIntegrationTests.yml @@ -27,7 +27,7 @@ jobs: fake-service-type: 'THRIFT_SERVER' steps: - name: Checkout PR - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4 with: diff --git a/.github/workflows/proxyTesting.yml b/.github/workflows/proxyTesting.yml index 7c1396a42..00736265f 100644 --- a/.github/workflows/proxyTesting.yml +++ b/.github/workflows/proxyTesting.yml @@ -19,7 +19,7 @@ jobs: # 1) Check Out the Repo ################################################################ - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 ################################################################ # 2) Set Up Java diff --git a/.github/workflows/release-thin.yml b/.github/workflows/release-thin.yml index 710dc49bb..241e71005 100644 --- a/.github/workflows/release-thin.yml +++ b/.github/workflows/release-thin.yml @@ -29,7 +29,7 @@ jobs: labels: linux-ubuntu-latest steps: - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: ref: ${{ github.event_name == 'workflow_dispatch' && format('refs/tags/{0}', inputs.tag) || github.event.workflow_run.head_sha }} fetch-tags: true @@ -114,7 +114,7 @@ jobs: labels: linux-ubuntu-latest steps: - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: ref: ${{ github.event_name == 'workflow_dispatch' && format('refs/tags/{0}', inputs.tag) || github.event.workflow_run.head_sha }} fetch-tags: true diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index b91fefb9f..157874788 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -23,7 +23,7 @@ jobs: labels: linux-ubuntu-latest steps: - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up JDK uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4 @@ -102,7 +102,7 @@ jobs: labels: linux-ubuntu-latest steps: - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up Java for publishing to Maven Central Repository uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4 diff --git a/.github/workflows/releaseFreeze.yml b/.github/workflows/releaseFreeze.yml index 8e4e65fc2..9cf243144 100644 --- a/.github/workflows/releaseFreeze.yml +++ b/.github/workflows/releaseFreeze.yml @@ -15,7 +15,7 @@ jobs: steps: - name: Check out repository - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up jq run: sudo apt-get update && sudo apt-get install -y jq diff --git a/.github/workflows/runIntegrationTests.yml b/.github/workflows/runIntegrationTests.yml index 7142b0a27..83b88c15e 100644 --- a/.github/workflows/runIntegrationTests.yml +++ b/.github/workflows/runIntegrationTests.yml @@ -26,7 +26,7 @@ jobs: fake-service-type: 'THRIFT_SERVER' steps: - name: Checkout code - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4 with: diff --git a/.github/workflows/runJdbcComparator.yml b/.github/workflows/runJdbcComparator.yml index 61ffbd1b2..bd9b4ce28 100644 --- a/.github/workflows/runJdbcComparator.yml +++ b/.github/workflows/runJdbcComparator.yml @@ -17,7 +17,7 @@ jobs: steps: - name: Checkout main branch - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: ref: main fetch-depth: 0 diff --git a/.github/workflows/slt.yml b/.github/workflows/slt.yml index ac410f9f3..046510498 100644 --- a/.github/workflows/slt.yml +++ b/.github/workflows/slt.yml @@ -23,7 +23,7 @@ jobs: labels: linux-ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up JDK 21 uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4 with: diff --git a/.github/workflows/sslTesting.yml b/.github/workflows/sslTesting.yml index c9b6a6caa..1776f319e 100644 --- a/.github/workflows/sslTesting.yml +++ b/.github/workflows/sslTesting.yml @@ -46,7 +46,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: ref: ${{ github.event.pull_request.head.ref || inputs.branch }} repository: ${{ github.event.pull_request.head.repo.full_name || inputs.repository }} diff --git a/.github/workflows/updateVersion.yml b/.github/workflows/updateVersion.yml index e54a6aed1..32d8fdf0e 100644 --- a/.github/workflows/updateVersion.yml +++ b/.github/workflows/updateVersion.yml @@ -21,7 +21,7 @@ jobs: labels: linux-ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/vulnerabilityCatcher.yml b/.github/workflows/vulnerabilityCatcher.yml index 42be61e88..2ef46f858 100644 --- a/.github/workflows/vulnerabilityCatcher.yml +++ b/.github/workflows/vulnerabilityCatcher.yml @@ -17,7 +17,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: ref: main # Explicitly check out main branch diff --git a/.github/workflows/warmMavenCache.yml b/.github/workflows/warmMavenCache.yml index b21ee4073..519b40d30 100644 --- a/.github/workflows/warmMavenCache.yml +++ b/.github/workflows/warmMavenCache.yml @@ -79,7 +79,7 @@ jobs: - name: Checkout main branch if: inputs.pr_number == '' - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Get JFrog OIDC token shell: bash