From 80ae322cce34e574001bd5f3eff38058c02399e6 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 18 Aug 2026 13:27:12 +0000 Subject: [PATCH] Pin dependencies --- .github/workflows/build.yaml | 26 +++++++++++++------------- .github/workflows/lint-and-test.yaml | 4 ++-- .github/workflows/release.yaml | 4 ++-- .github/workflows/sbom.yaml | 2 +- 4 files changed, 18 insertions(+), 18 deletions(-) diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index 7506fe6..6158424 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -21,12 +21,12 @@ jobs: working-directory: ./client steps: - name: Checkout main repo - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: submodules: "recursive" - name: Setup flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: stable flutter-version: 3.47.0 @@ -92,18 +92,18 @@ jobs: run: working-directory: ./client steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: submodules: "recursive" - name: Set up Java - uses: actions/setup-java@v3 + uses: actions/setup-java@e9fbacdec3bb3b6036605a3e6f7995d66773a8c6 # v3 with: distribution: "temurin" java-version: "17" - name: Setup flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: stable flutter-version: 3.47.0 @@ -125,7 +125,7 @@ jobs: - name: Sign AAB id: sign_aab - uses: r0adkll/sign-android-release@v1 + uses: r0adkll/sign-android-release@349ebdef58775b1e0d8099458af0816dc79b6407 # v1 with: releaseDirectory: client/build/app/outputs/bundle/release signingKeyBase64: "${{ secrets.ANDROID_SIGNING_KEY_BASE64 }}" @@ -134,7 +134,7 @@ jobs: keyPassword: "${{ secrets.ANDROID_KEYSTORE_PASSWORD }}" - name: Publish to Play Store - uses: r0adkll/upload-google-play@v1 + uses: r0adkll/upload-google-play@e738b9dd8f2476ea806d921b64aacd24f34515a5 # v1 # Mobile applications are published to the Play Store manually, with release tags applied # post-publication. To avoid redundant uploads, this step executes only for non-tagged # builds, ensuring tagged releases are distributed exclusively to GitHub. @@ -149,7 +149,7 @@ jobs: run: cp "$GITHUB_WORKSPACE/${{ steps.sign_aab.outputs.signedReleaseFile }}" Defguard.aab - name: Upload Android Artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 if: startsWith(github.ref, 'refs/tags/') with: name: android-app @@ -165,18 +165,18 @@ jobs: run: working-directory: ./client steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: submodules: "recursive" - name: Set up Java - uses: actions/setup-java@v3 + uses: actions/setup-java@e9fbacdec3bb3b6036605a3e6f7995d66773a8c6 # v3 with: distribution: "temurin" java-version: "17" - name: Setup flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: stable flutter-version: 3.47.0 @@ -195,7 +195,7 @@ jobs: - name: Sign APK id: sign_apk - uses: r0adkll/sign-android-release@v1 + uses: r0adkll/sign-android-release@349ebdef58775b1e0d8099458af0816dc79b6407 # v1 with: releaseDirectory: client/build/app/outputs/flutter-apk signingKeyBase64: "${{ secrets.ANDROID_SIGNING_KEY_BASE64 }}" @@ -207,7 +207,7 @@ jobs: run: cp "$GITHUB_WORKSPACE/${{ steps.sign_apk.outputs.signedReleaseFile }}" Defguard.apk - name: Upload Android Artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 if: startsWith(github.ref, 'refs/tags/') with: name: android-app-apk diff --git a/.github/workflows/lint-and-test.yaml b/.github/workflows/lint-and-test.yaml index 2803b99..f1ffa76 100644 --- a/.github/workflows/lint-and-test.yaml +++ b/.github/workflows/lint-and-test.yaml @@ -29,7 +29,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: submodules: "recursive" @@ -44,7 +44,7 @@ jobs: scanners: "vuln" - name: setup flutter - uses: subosito/flutter-action@v2 + uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2 with: channel: stable flutter-version: 3.47.0 diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index a8d647f..7de030a 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -11,14 +11,14 @@ jobs: steps: - name: Download build artifacts - uses: actions/download-artifact@v5 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 with: path: ./artifacts merge-multiple: true - name: Create GitHub release id: release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2 with: draft: true files: | diff --git a/.github/workflows/sbom.yaml b/.github/workflows/sbom.yaml index 425331a..8fcf0a6 100644 --- a/.github/workflows/sbom.yaml +++ b/.github/workflows/sbom.yaml @@ -29,7 +29,7 @@ jobs: echo "VERSION=$VERSION" >> $GITHUB_OUTPUT - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: ref: ${{ steps.vars.outputs.TAG_NAME }} submodules: "recursive"