From 876342bd503713de536fcfe95762c6b5cbdb0477 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 21 Jan 2025 16:33:05 +0000
Subject: [PATCH] Pin dependencies

---
 .github/actions/action-build-image/action.yml   | 2 +-
 .github/actions/action-maven-build/action.yml   | 2 +-
 .github/actions/action-maven-release/action.yml | 2 +-
 .github/actions/action-npm-build/action.yml     | 2 +-
 .github/workflows/deploy-pages.yml              | 4 ++--
 workflow-templates/ release-maven-image.yaml    | 2 +-
 workflow-templates/dependency-review.yaml       | 2 +-
 workflow-templates/maven-node-build.yaml        | 2 +-
 8 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/actions/action-build-image/action.yml b/.github/actions/action-build-image/action.yml
index abd1057..b04e109 100644
--- a/.github/actions/action-build-image/action.yml
+++ b/.github/actions/action-build-image/action.yml
@@ -36,7 +36,7 @@ runs:
   using: "composite"
   steps:
     - name: Checkout code
-      uses: actions/checkout@v4
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
     - name: Download a single artifact
       uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
       with:
diff --git a/.github/actions/action-maven-build/action.yml b/.github/actions/action-maven-build/action.yml
index 0d6ed52..93458fd 100644
--- a/.github/actions/action-maven-build/action.yml
+++ b/.github/actions/action-maven-build/action.yml
@@ -18,7 +18,7 @@ runs:
 
   using: "composite"
   steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
     - name: Set up JDK
       uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0
       with:
diff --git a/.github/actions/action-maven-release/action.yml b/.github/actions/action-maven-release/action.yml
index 7e6c897..65bc85d 100644
--- a/.github/actions/action-maven-release/action.yml
+++ b/.github/actions/action-maven-release/action.yml
@@ -52,7 +52,7 @@ runs:
   steps:
     # Checkout source code, set up Java, etc. Then...
     - name: Checkout code
-      uses: actions/checkout@v4
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
     - name: Set up JDK
       uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0
       with:
diff --git a/.github/actions/action-npm-build/action.yml b/.github/actions/action-npm-build/action.yml
index 6afc241..a302dd4 100644
--- a/.github/actions/action-npm-build/action.yml
+++ b/.github/actions/action-npm-build/action.yml
@@ -16,7 +16,7 @@ outputs:
 runs:
   using: "composite"
   steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
     - name: Set up Node.js
       uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
       with:
diff --git a/.github/workflows/deploy-pages.yml b/.github/workflows/deploy-pages.yml
index 5166519..d48b467 100644
--- a/.github/workflows/deploy-pages.yml
+++ b/.github/workflows/deploy-pages.yml
@@ -45,7 +45,7 @@ jobs:
         working-directory: ${{ inputs.sub-path }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0 # Required for vitepress lastUpdated
       - name: Setup Node
@@ -55,7 +55,7 @@ jobs:
           cache: npm
           cache-dependency-path: "${{ inputs.sub-path }}/package-lock.json"
       - name: Setup Pages
-        uses: actions/configure-pages@v5
+        uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
       - name: Install dependencies
         run: npm ci
       - name: Build with VitePress
diff --git a/workflow-templates/ release-maven-image.yaml b/workflow-templates/ release-maven-image.yaml
index bafe5ff..7b3377b 100644
--- a/workflow-templates/ release-maven-image.yaml	
+++ b/workflow-templates/ release-maven-image.yaml	
@@ -57,7 +57,7 @@ jobs:
     steps:
       - name: Create GitHub Release
         id: create_release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2
         with:
           tag_name: ${{needs.release-maven.outputs.MVN_ARTIFACT_ID}}-${{ github.event.inputs.releaseVersion }}
           draft: false
diff --git a/workflow-templates/dependency-review.yaml b/workflow-templates/dependency-review.yaml
index 8530931..21a0cd6 100644
--- a/workflow-templates/dependency-review.yaml
+++ b/workflow-templates/dependency-review.yaml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Dependency Review
         uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0
         with:
diff --git a/workflow-templates/maven-node-build.yaml b/workflow-templates/maven-node-build.yaml
index c6ece93..d725de1 100644
--- a/workflow-templates/maven-node-build.yaml
+++ b/workflow-templates/maven-node-build.yaml
@@ -13,7 +13,7 @@ jobs:
           - app-path: # eg. refarch-eai
           - app-path: # eg. refarch-webcomponent
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - if:  ${{hashFiles(format('./{0}/package.json', matrix.app-path))!=null}}
         id: node
         uses: it-at-m/.github/.github/actions/action-npm-build@main