From 23faa8531ff41a02bc6b50a68075158dfca995ec Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 21 Mar 2024 13:10:59 +0100 Subject: [PATCH] chore(deps): pin dependencies (#549) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit [![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | pinDigest | -> `b4ffde6` | | [actions/github-script](https://togithub.com/actions/github-script) | action | pinDigest | -> `60a0d83` | | [actions/setup-java](https://togithub.com/actions/setup-java) | action | pinDigest | -> `99b8673` | | [actions/upload-artifact](https://togithub.com/actions/upload-artifact) | action | pinDigest | -> `5d5d22a` | | [gradle/actions](https://togithub.com/gradle/actions) | action | pinDigest | -> `417ae3c` | | [gradle/wrapper-validation-action](https://togithub.com/gradle/wrapper-validation-action) | action | pinDigest | -> `699bb18` | | [myrotvorets/set-commit-status-action](https://togithub.com/myrotvorets/set-commit-status-action) | action | pinDigest | -> `3730c0a` | | [r0adkll/sign-android-release](https://togithub.com/r0adkll/sign-android-release) | action | pinDigest | -> `dbeba6b` | | [r0adkll/upload-google-play](https://togithub.com/r0adkll/upload-google-play) | action | pinDigest | -> `935ef9c` | | [reviewdog/action-suggester](https://togithub.com/reviewdog/action-suggester) | action | pinDigest | -> `3d7fde6` | | [xt0rted/pull-request-comment-branch](https://togithub.com/xt0rted/pull-request-comment-branch) | action | pinDigest | -> `d97294d` | | [ytanikin/PRConventionalCommits](https://togithub.com/ytanikin/PRConventionalCommits) | action | pinDigest | -> `b7be921` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/pachli/pachli-android). Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/apk-on-comment.yml | 20 +++++++++---------- .github/workflows/ci.yml | 8 ++++---- .github/workflows/ktlint.yml | 10 +++++----- .../workflows/populate-gradle-build-cache.yml | 8 ++++---- .github/workflows/pr-conventional-commit.yml | 2 +- .../upload-blue-release-google-play.yml | 16 +++++++-------- .../upload-orange-release-google-play.yml | 16 +++++++-------- 7 files changed, 40 insertions(+), 40 deletions(-) diff --git a/.github/workflows/apk-on-comment.yml b/.github/workflows/apk-on-comment.yml index a3745896c..349ce1d7d 100644 --- a/.github/workflows/apk-on-comment.yml +++ b/.github/workflows/apk-on-comment.yml @@ -14,34 +14,34 @@ jobs: steps: - name: Get branch of PR - uses: xt0rted/pull-request-comment-branch@v2 + uses: xt0rted/pull-request-comment-branch@d97294d304604fa98a2600a6e2f916a84b596dc7 # v2 id: comment-branch - name: Set latest commit status as pending - uses: myrotvorets/set-commit-status-action@v2.0.1 + uses: myrotvorets/set-commit-status-action@3730c0a348a2ace3c110851bed53331bc6406e9f # v2.0.1 with: sha: ${{ steps.comment-branch.outputs.head_sha }} token: ${{ secrets.GITHUB_TOKEN }} status: pending - name: Checkout PR branch ${{ steps.comment-branch.outputs.head_ref }} - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 with: ref: ${{ steps.comment-branch.outputs.head_ref }} - - uses: actions/setup-java@v4 + - uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4 with: java-version: '17' distribution: 'temurin' - name: Gradle Wrapper Validation - uses: gradle/wrapper-validation-action@v2 + uses: gradle/wrapper-validation-action@699bb18358f12c5b78b37bb0111d3a0e2276e0e2 # v2 - name: Copy CI gradle.properties run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties - name: Setup Gradle - uses: gradle/actions/setup-gradle@v3 + uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3 with: cache-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }} @@ -51,7 +51,7 @@ jobs: - name: Build APK run: ./gradlew assembleOrangeGoogleRelease --stacktrace - - uses: r0adkll/sign-android-release@v1.0.4 + - uses: r0adkll/sign-android-release@dbeba6b98a60b0fd540c02443c7f428cdedf0e7f # v1.0.4 name: Sign app APK id: sign_app_apk with: @@ -65,14 +65,14 @@ jobs: - name: Upload APK Release Asset id: upload-release-asset-apk - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4 with: name: app-release.apk path: ${{steps.sign_app_apk.outputs.signedReleaseFile}} compression-level: 0 - name: Add workflow result as comment on PR - uses: actions/github-script@v7 + uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7 if: always() with: script: | @@ -90,7 +90,7 @@ jobs: }) - name: Set latest commit status as ${{ job.status }} - uses: myrotvorets/set-commit-status-action@v2.0.1 + uses: myrotvorets/set-commit-status-action@3730c0a348a2ace3c110851bed53331bc6406e9f # v2.0.1 if: always() with: sha: ${{ steps.comment-branch.outputs.head_sha }} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index a7730b720..0e99e868e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -19,21 +19,21 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - - uses: actions/setup-java@v4 + - uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4 with: java-version: '17' distribution: 'temurin' - name: Gradle Wrapper Validation - uses: gradle/wrapper-validation-action@v2 + uses: gradle/wrapper-validation-action@699bb18358f12c5b78b37bb0111d3a0e2276e0e2 # v2 - name: Copy CI gradle.properties run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties - name: Setup Gradle - uses: gradle/actions/setup-gradle@v3 + uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3 with: cache-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }} diff --git a/.github/workflows/ktlint.yml b/.github/workflows/ktlint.yml index fa9d0ace9..6593763c1 100644 --- a/.github/workflows/ktlint.yml +++ b/.github/workflows/ktlint.yml @@ -10,9 +10,9 @@ jobs: timeout-minutes: 5 runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - - uses: actions/setup-java@v4 + - uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4 with: distribution: 'temurin' java-version: '17' @@ -20,10 +20,10 @@ jobs: - run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties - - uses: gradle/wrapper-validation-action@v2 + - uses: gradle/wrapper-validation-action@699bb18358f12c5b78b37bb0111d3a0e2276e0e2 # v2 - name: Setup Gradle - uses: gradle/actions/setup-gradle@v3 + uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3 with: cache-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }} @@ -31,6 +31,6 @@ jobs: - run: ./gradlew ktlintFormat - - uses: reviewdog/action-suggester@v1 + - uses: reviewdog/action-suggester@3d7fde6859623ad6174df5fd662677a0eb63310a # v1 with: tool_name: ktlintFormat diff --git a/.github/workflows/populate-gradle-build-cache.yml b/.github/workflows/populate-gradle-build-cache.yml index b29ed64e8..b15d80576 100644 --- a/.github/workflows/populate-gradle-build-cache.yml +++ b/.github/workflows/populate-gradle-build-cache.yml @@ -17,21 +17,21 @@ jobs: name: app:buildOrangeDebug runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - - uses: actions/setup-java@v4 + - uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4 with: java-version: '17' distribution: 'temurin' - name: Gradle Wrapper Validation - uses: gradle/wrapper-validation-action@v2 + uses: gradle/wrapper-validation-action@699bb18358f12c5b78b37bb0111d3a0e2276e0e2 # v2 - name: Copy CI gradle.properties run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties - name: Setup Gradle - uses: gradle/actions/setup-gradle@v3 + uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3 with: cache-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }} diff --git a/.github/workflows/pr-conventional-commit.yml b/.github/workflows/pr-conventional-commit.yml index 0a6d81881..24f84fb7b 100644 --- a/.github/workflows/pr-conventional-commit.yml +++ b/.github/workflows/pr-conventional-commit.yml @@ -9,7 +9,7 @@ jobs: runs-on: ubuntu-latest steps: - name: PR Conventional Commit Validation - uses: ytanikin/PRConventionalCommits@1.1.0 + uses: ytanikin/PRConventionalCommits@b7be9213c4fa33260646db6c9b905332dc90b310 # 1.1.0 with: task_types: '["build","change","chore","ci","deprecate","docs","feat","fix","perf","refactor","remove","revert","security","style","test"]' add_label: 'false' diff --git a/.github/workflows/upload-blue-release-google-play.yml b/.github/workflows/upload-blue-release-google-play.yml index 9c5f9c39c..0eb0e42b4 100644 --- a/.github/workflows/upload-blue-release-google-play.yml +++ b/.github/workflows/upload-blue-release-google-play.yml @@ -9,21 +9,21 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - - uses: actions/setup-java@v4 + - uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4 with: java-version: '17' distribution: 'temurin' - name: Gradle Wrapper Validation - uses: gradle/wrapper-validation-action@v2 + uses: gradle/wrapper-validation-action@699bb18358f12c5b78b37bb0111d3a0e2276e0e2 # v2 - name: Copy CI gradle.properties run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties - name: Setup Gradle - uses: gradle/actions/setup-gradle@v3 + uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3 with: cache-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }} @@ -33,7 +33,7 @@ jobs: - name: Build Google AAB run: ./gradlew :app:bundleBlueGoogleRelease --stacktrace - - uses: r0adkll/sign-android-release@v1.0.4 + - uses: r0adkll/sign-android-release@dbeba6b98a60b0fd540c02443c7f428cdedf0e7f # v1.0.4 name: Sign GitHub APK id: sign_app_apk with: @@ -45,7 +45,7 @@ jobs: env: BUILD_TOOLS_VERSION: "34.0.0" - - uses: r0adkll/sign-android-release@v1.0.4 + - uses: r0adkll/sign-android-release@dbeba6b98a60b0fd540c02443c7f428cdedf0e7f # v1.0.4 name: Sign Google AAB id: sign_app_aab with: @@ -59,7 +59,7 @@ jobs: - name: Upload APK Release Asset id: upload-release-asset-apk - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4 with: name: app-release.apk path: ${{steps.sign_app_apk.outputs.signedReleaseFile}} @@ -72,7 +72,7 @@ jobs: - name: Upload AAB to Google Play id: upload-release-asset-aab - uses: r0adkll/upload-google-play@v1.1.3 + uses: r0adkll/upload-google-play@935ef9c68bb393a8e6116b1575626a7f5be3a7fb # v1.1.3 with: serviceAccountJsonPlainText: ${{ secrets.PLAY_SERVICE_ACCOUNT_KEY }} packageName: app.pachli diff --git a/.github/workflows/upload-orange-release-google-play.yml b/.github/workflows/upload-orange-release-google-play.yml index 649bed00a..e47d480f8 100644 --- a/.github/workflows/upload-orange-release-google-play.yml +++ b/.github/workflows/upload-orange-release-google-play.yml @@ -9,23 +9,23 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 with: fetch-depth: 0 - - uses: actions/setup-java@v4 + - uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4 with: java-version: '17' distribution: 'temurin' - name: Gradle Wrapper Validation - uses: gradle/wrapper-validation-action@v2 + uses: gradle/wrapper-validation-action@699bb18358f12c5b78b37bb0111d3a0e2276e0e2 # v2 - name: Copy CI gradle.properties run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties - name: Setup Gradle - uses: gradle/actions/setup-gradle@v3 + uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3 with: cache-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }} @@ -38,7 +38,7 @@ jobs: - name: Build AAB run: ./gradlew :app:bundleOrangeGoogleRelease --stacktrace - - uses: r0adkll/sign-android-release@v1.0.4 + - uses: r0adkll/sign-android-release@dbeba6b98a60b0fd540c02443c7f428cdedf0e7f # v1.0.4 name: Sign app APK id: sign_app_apk with: @@ -50,7 +50,7 @@ jobs: env: BUILD_TOOLS_VERSION: "34.0.0" - - uses: r0adkll/sign-android-release@v1.0.4 + - uses: r0adkll/sign-android-release@dbeba6b98a60b0fd540c02443c7f428cdedf0e7f # v1.0.4 name: Sign app AAB id: sign_app_aab with: @@ -64,7 +64,7 @@ jobs: - name: Upload APK Release Asset id: upload-release-asset-apk - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4 with: name: app-release.apk path: ${{steps.sign_app_apk.outputs.signedReleaseFile}} @@ -78,7 +78,7 @@ jobs: - name: Upload AAB to Google Play id: upload-release-asset-aab - uses: r0adkll/upload-google-play@v1.1.3 + uses: r0adkll/upload-google-play@935ef9c68bb393a8e6116b1575626a7f5be3a7fb # v1.1.3 with: serviceAccountJsonPlainText: ${{ secrets.PLAY_SERVICE_ACCOUNT_KEY }} packageName: app.pachli.current