From 4e632b7cd44df1e4cade50626c8a0c7666ea9717 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 12 Sep 2024 08:06:09 +0000
Subject: [PATCH] Pin dependencies

---
 .github/actions/run-gradle/action.yml |  6 +++---
 .github/workflows/combine-prs.yml     |  2 +-
 .github/workflows/main.yml            | 10 +++++-----
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/actions/run-gradle/action.yml b/.github/actions/run-gradle/action.yml
index df590b2..01c3f4d 100644
--- a/.github/actions/run-gradle/action.yml
+++ b/.github/actions/run-gradle/action.yml
@@ -8,17 +8,17 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - uses: actions/setup-java@v4
+    - uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88 # v4
       id: setup-toolchain-jdk
       with:
         distribution: temurin
         java-version: 11
-    - uses: actions/setup-java@v4
+    - uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88 # v4
       id: setup-gradle-jdk
       with:
         distribution: temurin
         java-version: 21
-    - uses: gradle/actions/setup-gradle@v4
+    - uses: gradle/actions/setup-gradle@16bf8bc8fe830fa669c3c9f914d3eb147c629707 # v4
     - shell: bash
       env:
         JDK11: ${{ steps.setup-toolchain-jdk.outputs.path }}
diff --git a/.github/workflows/combine-prs.yml b/.github/workflows/combine-prs.yml
index 95ec55b..d7cd3d4 100644
--- a/.github/workflows/combine-prs.yml
+++ b/.github/workflows/combine-prs.yml
@@ -11,6 +11,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: combine-prs
-        uses: github/combine-prs@v5.1.0
+        uses: github/combine-prs@20d70f9d80eeb5958667d0602da433bd04ca6713 # v5.1.0
         with:
           github_token: ${{ secrets.GH_TOKEN }}
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 97dbf13..847bed3 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Check out repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       with:
         fetch-depth: 1
     - name: Build
@@ -24,7 +24,7 @@ jobs:
     runs-on: windows-latest
     steps:
     - name: Check out repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       with:
         fetch-depth: 1
     - name: Build
@@ -34,7 +34,7 @@ jobs:
     runs-on: macos-latest
     steps:
     - name: Check out repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       with:
         fetch-depth: 1
     - name: Build
@@ -47,7 +47,7 @@ jobs:
     if: github.event_name == 'push' && github.repository == 'ota4j-team/opentest4j' && (startsWith(github.ref, 'refs/heads/releases/') || github.ref == 'refs/heads/main')
     steps:
     - name: Check out repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       with:
         fetch-depth: 1
     - name: Publish
@@ -65,7 +65,7 @@ jobs:
     if: github.event_name == 'push' && github.repository == 'ota4j-team/opentest4j' && github.ref == 'refs/heads/main'
     steps:
       - name: Check out repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 1
       - name: Publish