Pin dependencies (#381)

* Pin dependencies * Update actions/setup-node digest to 1d0ff46 (#382) Co-authored-by: isle-buildkit-renovate[bot] <193913961+isle-buildkit-renovate[bot]@users.noreply.github.com> --------- Co-authored-by: isle-buildkit-renovate[bot] <193913961+isle-buildkit-renovate[bot]@users.noreply.github.com>
Islandora-Devops · Feb 12, 2025 · 8d564e3 · 8d564e3
1 parent 1756268
commit 8d564e3
Show file tree

Hide file tree

Showing 6 changed files with 35 additions and 35 deletions.
diff --git a/.github/workflows/cleanup.yml b/.github/workflows/cleanup.yml
@@ -8,12 +8,12 @@ jobs:
     steps:
       - name: Checkout
         uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # v4
-      - uses: actions/setup-java@v3
+      - uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3
         with:
           distribution: temurin
           java-version: 11
       - name: Setup Gradle
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@a8f75513eafdebd8141bd1cd4e30fcd194af8dfa # v2
         with:
           arguments: |
             deleteEligibleDockerHubTags

diff --git a/.github/workflows/description.yml b/.github/workflows/description.yml
@@ -19,199 +19,199 @@ jobs:
           find . -maxdepth 2 -mindepth 2 -type f -name "README*.md" -exec sed -i 's/](\.\.\/\([^/]*\).*)/](.\/\1)/g' {} \;
 
       - name: ActiveMQ - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/activemq
           readme-filepath: ./activemq/README.md
 
       - name: Alpaca - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/alpaca
           readme-filepath: ./alpaca/README.md
 
       - name: Base - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/base
           readme-filepath: ./base/README.md
 
       - name: Blazegraph - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/blazegraph
           readme-filepath: ./blazegraph/README.md
 
       - name: cantaloupe - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/cantaloupe
           readme-filepath: ./cantaloupe/README.dockerhub.md
 
       - name: Code-Server - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/code-server
           readme-filepath: ./code-server/README.md
 
       - name: Crayfish - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/crayfish
           readme-filepath: ./crayfish/README.md
 
       - name: CrayFits - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/crayfits
           readme-filepath: ./crayfits/README.md
 
       - name: Drupal - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/drupal
           readme-filepath: ./drupal/README.md
 
       - name: Fcrepo6 - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/fcrepo6
           readme-filepath: ./fcrepo6/README.md
 
       - name: Fits - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/fits
           readme-filepath: ./fits/README.md
 
       - name: Handle - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/handle
           readme-filepath: ./handle/README.md
 
       - name: Homarus - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/homarus
           readme-filepath: ./homarus/README.md
 
       - name: Houdini - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/houdini
           readme-filepath: ./houdini/README.md
 
       - name: hypercube - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/hypercube
           readme-filepath: ./hypercube/README.md
 
       - name: Java - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/java
           readme-filepath: ./java/README.md
 
       - name: MariaDB - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/mariadb
           readme-filepath: ./mariadb/README.md
 
       - name: Matomo - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/matomo
           readme-filepath: ./matomo/README.md
 
       - name: Milliner - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/milliner
           readme-filepath: ./milliner/README.md
 
       - name: Nginx - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/nginx
           readme-filepath: ./nginx/README.md
 
       - name: PostgreSQL - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/postgresql
           readme-filepath: ./postgresql/README.md
 
       - name: RipRap - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/riprap
           readme-filepath: ./riprap/README.md
 
       - name: Solr - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/solr
           readme-filepath: ./solr/README.md
 
       - name: Test - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
           repository: ${{ vars.repository }}/tomcat
           readme-filepath: ./test/README.md
 
       - name: Tomcat - Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}

diff --git a/.github/workflows/grype.yml b/.github/workflows/grype.yml
@@ -25,16 +25,16 @@ jobs:
         with:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
-      - uses: actions/setup-java@v3
+      - uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3
         with:
           distribution: temurin
           java-version: 11
       - name: Setup Gradle
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@a8f75513eafdebd8141bd1cd4e30fcd194af8dfa # v2
         with:
           cache-read-only: false
           arguments: ${{ inputs.image }}:grype ${{ inputs.digest }} --info
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4
         if: always()
         with:
           name: ${{ inputs.image }} Grype Reports

diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
@@ -18,7 +18,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
-      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
+      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
         with:
           node-version: 20
 

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -26,16 +26,16 @@ jobs:
           username: ${{ secrets.registry_user }}
           password: ${{ secrets.registry_password }}
 
-      - uses: actions/setup-java@v3
+      - uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3
         with:
           distribution: temurin
           java-version: 11
       - name: Setup Gradle
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@a8f75513eafdebd8141bd1cd4e30fcd194af8dfa # v2
         with:
           cache-read-only: false
           arguments: ${{ inputs.image }}:test -Pisle.test.pull=true ${{ inputs.digests }} --info
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4
         if: always()
         with:
           name: ${{ inputs.image }} Test Logs

diff --git a/.github/workflows/validate-renovate.yml b/.github/workflows/validate-renovate.yml
@@ -14,7 +14,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
-      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
+      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
         with:
           node-version: 20