Skip to content

Commit 31e75e0

Browse files
renovate[bot]renovate[bot]
authored
Pin dependencies
1 parent 1d5e54e commit 31e75e0

4 files changed

Lines changed: 24 additions & 24 deletions

File tree

‎.github/workflows/build.yaml‎

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -22,12 +22,12 @@ jobs:
2222
working-directory: ./client
2323
steps:
2424
- name: Checkout main repo
25-
uses: actions/checkout@v7
25+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
2626
with:
2727
submodules: "recursive"
2828

2929
- name: Setup flutter
30-
uses: subosito/flutter-action@v2
30+
uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2
3131
with:
3232
channel: stable
3333
flutter-version: 3.47.2
@@ -88,18 +88,18 @@ jobs:
8888
run:
8989
working-directory: ./client
9090
steps:
91-
- uses: actions/checkout@v7
91+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
9292
with:
9393
submodules: "recursive"
9494

9595
- name: Set up Java
96-
uses: actions/setup-java@v3
96+
uses: actions/setup-java@e9fbacdec3bb3b6036605a3e6f7995d66773a8c6 # v3
9797
with:
9898
distribution: "temurin"
9999
java-version: "17"
100100

101101
- name: Setup flutter
102-
uses: subosito/flutter-action@v2
102+
uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2
103103
with:
104104
channel: stable
105105
flutter-version: 3.47.2
@@ -118,7 +118,7 @@ jobs:
118118

119119
- name: Sign AAB
120120
id: sign_aab
121-
uses: r0adkll/sign-android-release@v1
121+
uses: r0adkll/sign-android-release@349ebdef58775b1e0d8099458af0816dc79b6407 # v1
122122
with:
123123
releaseDirectory: client/build/app/outputs/bundle/release
124124
signingKeyBase64: "${{ secrets.ANDROID_SIGNING_KEY_BASE64 }}"
@@ -127,7 +127,7 @@ jobs:
127127
keyPassword: "${{ secrets.ANDROID_KEYSTORE_PASSWORD }}"
128128

129129
- name: Publish to Play Store
130-
uses: r0adkll/upload-google-play@v1
130+
uses: r0adkll/upload-google-play@e738b9dd8f2476ea806d921b64aacd24f34515a5 # v1
131131
# Mobile applications are published to the Play Store manually, with release tags applied
132132
# post-publication. To avoid redundant uploads, this step executes only for non-tagged
133133
# builds, ensuring tagged releases are distributed exclusively to GitHub.
@@ -142,7 +142,7 @@ jobs:
142142
run: cp "$GITHUB_WORKSPACE/${{ steps.sign_aab.outputs.signedReleaseFile }}" Defguard.aab
143143

144144
- name: Upload Android Artifact
145-
uses: actions/upload-artifact@v4
145+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
146146
if: startsWith(github.ref, 'refs/tags/')
147147
with:
148148
name: android-app
@@ -158,18 +158,18 @@ jobs:
158158
run:
159159
working-directory: ./client
160160
steps:
161-
- uses: actions/checkout@v7
161+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
162162
with:
163163
submodules: "recursive"
164164

165165
- name: Set up Java
166-
uses: actions/setup-java@v3
166+
uses: actions/setup-java@e9fbacdec3bb3b6036605a3e6f7995d66773a8c6 # v3
167167
with:
168168
distribution: "temurin"
169169
java-version: "17"
170170

171171
- name: Setup flutter
172-
uses: subosito/flutter-action@v2
172+
uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2
173173
with:
174174
channel: stable
175175
flutter-version: 3.47.2
@@ -191,7 +191,7 @@ jobs:
191191

192192
- name: Sign APK
193193
id: sign_apk
194-
uses: r0adkll/sign-android-release@v1
194+
uses: r0adkll/sign-android-release@349ebdef58775b1e0d8099458af0816dc79b6407 # v1
195195
with:
196196
releaseDirectory: client/build/app/outputs/flutter-apk
197197
signingKeyBase64: "${{ secrets.ANDROID_SIGNING_KEY_BASE64 }}"
@@ -203,7 +203,7 @@ jobs:
203203
run: cp "$GITHUB_WORKSPACE/${{ steps.sign_apk.outputs.signedReleaseFile }}" Defguard.apk
204204

205205
- name: Upload Android Artifact
206-
uses: actions/upload-artifact@v4
206+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
207207
if: startsWith(github.ref, 'refs/tags/') || github.ref == 'refs/heads/dev' || github.event_name == 'workflow_dispatch'
208208
with:
209209
name: android-app-apk

‎.github/workflows/lint-and-test.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -29,12 +29,12 @@ jobs:
2929

3030
steps:
3131
- name: Checkout
32-
uses: actions/checkout@v7
32+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
3333
with:
3434
submodules: "recursive"
3535

3636
- name: Scan code with Trivy
37-
uses: aquasecurity/trivy-action@v0.36.0
37+
uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
3838
with:
3939
scan-type: "fs"
4040
scan-ref: "."
@@ -44,7 +44,7 @@ jobs:
4444
scanners: "vuln"
4545

4646
- name: setup flutter
47-
uses: subosito/flutter-action@v2
47+
uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2
4848
with:
4949
channel: stable
5050
flutter-version: 3.47.2
@@ -68,12 +68,12 @@ jobs:
6868

6969
steps:
7070
- name: Checkout
71-
uses: actions/checkout@v7
71+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
7272
with:
7373
submodules: "recursive"
7474

7575
- name: setup flutter
76-
uses: subosito/flutter-action@v2
76+
uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2
7777
with:
7878
channel: stable
7979
flutter-version: 3.47.2

‎.github/workflows/release.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,14 +11,14 @@ jobs:
1111

1212
steps:
1313
- name: Download build artifacts
14-
uses: actions/download-artifact@v5
14+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
1515
with:
1616
path: ./artifacts
1717
merge-multiple: true
1818

1919
- name: Create GitHub release
2020
id: release
21-
uses: softprops/action-gh-release@v2
21+
uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2
2222
with:
2323
draft: true
2424
files: |

‎.github/workflows/sbom.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -29,13 +29,13 @@ jobs:
2929
echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
3030
3131
- name: Checkout
32-
uses: actions/checkout@v7
32+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
3333
with:
3434
ref: ${{ steps.vars.outputs.TAG_NAME }}
3535
submodules: "recursive"
3636

3737
- name: Create SBOM with Trivy
38-
uses: aquasecurity/trivy-action@v0.36.0
38+
uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
3939
with:
4040
scan-type: "fs"
4141
format: "spdx-json"
@@ -45,7 +45,7 @@ jobs:
4545
scanners: "vuln"
4646

4747
- name: Create security advisory file with Trivy
48-
uses: aquasecurity/trivy-action@v0.36.0
48+
uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
4949
with:
5050
scan-type: "fs"
5151
format: "json"
@@ -55,7 +55,7 @@ jobs:
5555
scanners: "vuln"
5656

5757
- name: Upload SBOMs and advisories
58-
uses: shogo82148/actions-upload-release-asset@v1
58+
uses: shogo82148/actions-upload-release-asset@aaba0f56bdbc1071f4af234d5cb16055e8a400de # v1
5959
env:
6060
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
6161
with:

0 commit comments

Comments
 (0)