From 639617ffb0fea28ce74f08778a2b62b1a4970e53 Mon Sep 17 00:00:00 2001
From: Maarten Mulders <m.th.mulders@xs4all.nl>
Date: Mon, 25 Dec 2023 10:00:22 +0100
Subject: [PATCH] chore(build): Specify exact versions of GitHub actions

---
 .github/workflows/build.yml        |  2 +-
 .github/workflows/early-access.yml | 14 +++++++-------
 .github/workflows/release.yml      | 20 ++++++++++----------
 3 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index cf9de081..0e3a98bf 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -24,7 +24,7 @@ jobs:
         distribution: 'adopt'
         cache: maven
     - name: Cache Maven packages
-      uses: actions/cache@v3
+      uses: actions/cache@v3.0.2
       with:
         path: ~/.m2
         key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
diff --git a/.github/workflows/early-access.yml b/.github/workflows/early-access.yml
index 8666a899..fa9bbcbe 100644
--- a/.github/workflows/early-access.yml
+++ b/.github/workflows/early-access.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: Download all build artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v3.0.2
 
       - name: Check out repository
         uses: actions/checkout@v4.1.1
@@ -44,7 +44,7 @@ jobs:
         uses: ilammy/msvc-dev-cmd@v1.12.1
 
       - name: Setup GraalVM
-        uses: graalvm/setup-graalvm@v1
+        uses: graalvm/setup-graalvm@v1.1.5.1
         with:
           distribution: 'graalvm'
           java-version: 17
@@ -74,7 +74,7 @@ jobs:
         if: matrix.os == 'ubuntu-latest'
 
       - name: Cache Maven packages
-        uses: actions/cache@v3
+        uses: actions/cache@v3.0.2
         with:
           path: ~/.m2
           key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -96,7 +96,7 @@ jobs:
         run: mvn -B -Pdist package -DskipTests
 
       - name: Upload build artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v3.1.3
         with:
           name: artifacts
           path: |
@@ -120,10 +120,10 @@ jobs:
         run: git checkout ${{ steps.head.outputs.content }}
 
       - name: Download all build artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v3.0.2
 
       - name: Cache Maven packages
-        uses: actions/cache@v3
+        uses: actions/cache@v3.3.2
         with:
           path: ~/.m2
           key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -136,7 +136,7 @@ jobs:
 
       - name: Capture JReleaser output
         if: always()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v3.1.3
         with:
           name: jreleaser-release-output
           retention-days: 7
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 439a4ca6..1fe14dd0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -28,7 +28,7 @@ jobs:
           distribution: 'adopt'
 
       - name: Cache Maven packages
-        uses: actions/cache@v3
+        uses: actions/cache@v3.3.2
         with:
           path: ~/.m2
           key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -56,7 +56,7 @@ jobs:
           echo $NEXT_VERSION > NEXT_VERSION
 
       - name: Upload version files
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v3.1.3
         with:
           name: artifacts
           path: |
@@ -85,7 +85,7 @@ jobs:
 
     steps:
       - name: Download all build artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v3.0.2
 
       - name: Read HEAD ref
         id: head
@@ -103,7 +103,7 @@ jobs:
         uses: ilammy/msvc-dev-cmd@v1.12.1
 
       - name: Setup GraalVM
-        uses: graalvm/setup-graalvm@v1
+        uses: graalvm/setup-graalvm@v1.1.5.1
         with:
           distribution: 'graalvm'
           java-version: 17
@@ -133,7 +133,7 @@ jobs:
         if: matrix.os == 'ubuntu-latest'
 
       - name: Cache Maven packages
-        uses: actions/cache@v3
+        uses: actions/cache@v3.3.2
         with:
           path: ~/.m2
           key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -155,7 +155,7 @@ jobs:
         run: mvn -B -Pdist package -DskipTests
 
       - name: Upload build artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v3.1.3
         with:
           name: artifacts
           path: |
@@ -171,7 +171,7 @@ jobs:
     steps:
       # must read HEAD before checkout
       - name: Download all build artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v3.0.2
 
       - name: Read HEAD ref
         id: head
@@ -202,7 +202,7 @@ jobs:
 
       # checkout will clobber downloaded artifacts; we have to download them again
       - name: Download all build artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v3.0.2
 
       - name: Set up Java
         uses: actions/setup-java@v3.13.0
@@ -211,7 +211,7 @@ jobs:
           distribution: 'adopt'
 
       - name: Cache Maven packages
-        uses: actions/cache@v3
+        uses: actions/cache@v3.3.2
         with:
           path: ~/.m2
           key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -236,7 +236,7 @@ jobs:
 
       - name: Capture JReleaser output
         if: always()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v3.1.3
         with:
           name: jreleaser-release-output
           retention-days: 7