5454 # Running with HANA requires at least 8GB memory just for the database, which we don't have on GH Actions runners
5555 # - rdbms: hana
5656 steps :
57- - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
57+ - uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
5858 with :
5959 persist-credentials : false
6060 - name : Reclaim Disk Space
6464 RDBMS : ${{ matrix.rdbms }}
6565 run : ci/database-start.sh
6666 - name : Set up Java 25
67- uses : actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
67+ uses : actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
6868 with :
6969 distribution : ' temurin'
7070 java-version : ' 25'
8181 echo "buildtool-cache-key=${ROOT_CACHE_KEY}-${CURRENT_MONTH}-${CURRENT_BRANCH}-${CURRENT_DAY}" >> $GITHUB_OUTPUT
8282 - name : Cache Maven/Gradle Dependency/Dist Caches
8383 id : cache-maven
84- uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
84+ uses : actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
8585 # if it's not a pull request, we restore and save the cache
8686 if : github.event_name != 'pull_request'
8787 with :
9898 ${{ steps.cache-key.outputs.buildtool-monthly-branch-cache-key }}-
9999 ${{ steps.cache-key.outputs.buildtool-monthly-cache-key }}-
100100 - name : Restore Maven/Gradle Dependency/Dist Caches
101- uses : actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
101+ uses : actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
102102 # if it a pull request, we restore the cache but we don't save it
103103 if : github.event_name == 'pull_request'
104104 with :
@@ -126,14 +126,14 @@ jobs:
126126 # The actual publishing must be done in a separate job (see ci-report.yml).
127127 # We don't write to the remote cache as that would be unsafe.
128128 - name : Upload GitHub Actions artifact for the Develocity build scan
129- uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
129+ uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
130130 if : " ${{ github.event_name == 'pull_request' && !cancelled() }}"
131131 with :
132132 name : build-scan-data-${{ matrix.rdbms }}
133133 path : ~/.gradle/build-scan-data
134134
135135 - name : Upload test reports (if Gradle failed)
136- uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
136+ uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
137137 if : failure()
138138 with :
139139 name : test-reports-java11-${{ matrix.rdbms }}
@@ -158,7 +158,7 @@ jobs:
158158 - rdbms : base-database-service-21c
159159 - rdbms : base-database-service-23ai
160160 steps :
161- - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
161+ - uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
162162 with :
163163 persist-credentials : false
164164 - name : Set up Java 25
@@ -178,7 +178,7 @@ jobs:
178178 echo "buildtool-cache-key=${ROOT_CACHE_KEY}-${CURRENT_MONTH}-${CURRENT_BRANCH}-${CURRENT_DAY}" >> $GITHUB_OUTPUT
179179 - name : Cache Maven/Gradle Dependency/Dist Caches
180180 id : cache-maven
181- uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
181+ uses : actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
182182 # if it's not a pull request, we restore and save the cache
183183 if : github.event_name != 'pull_request'
184184 with :
@@ -195,7 +195,7 @@ jobs:
195195 ${{ steps.cache-key.outputs.buildtool-monthly-branch-cache-key }}-
196196 ${{ steps.cache-key.outputs.buildtool-monthly-cache-key }}-
197197 - name : Restore Maven/Gradle Dependency/Dist Caches
198- uses : actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
198+ uses : actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
199199 # if it is a pull request, we restore the cache but we don't save it
200200 if : github.event_name == 'pull_request'
201201 with :
@@ -243,13 +243,13 @@ jobs:
243243 # We don't write to the remote cache as that would be unsafe.
244244 # That's even on push, because we do not trust Atlas runners to hold secrets: they are shared infrastructure.
245245 - name : Upload GitHub Actions artifact for the Develocity build scan
246- uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
246+ uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
247247 if : " ${{ !cancelled() }}"
248248 with :
249249 name : build-scan-data-${{ matrix.rdbms }}
250250 path : ~/.gradle/build-scan-data
251251 - name : Upload test reports (if Gradle failed)
252- uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
252+ uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
253253 if : failure()
254254 with :
255255 name : test-reports-java11-${{ matrix.rdbms }}
@@ -265,13 +265,13 @@ jobs:
265265 name : Static code analysis
266266 runs-on : ubuntu-latest
267267 steps :
268- - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
268+ - uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
269269 with :
270270 persist-credentials : false
271271 - name : Reclaim disk space and sanitize user home
272272 run : .github/ci-prerequisites-atlas.sh
273273 - name : Set up Java 25
274- uses : actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
274+ uses : actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
275275 with :
276276 distribution : ' temurin'
277277 java-version : ' 25'
@@ -288,7 +288,7 @@ jobs:
288288 echo "buildtool-cache-key=${ROOT_CACHE_KEY}-${CURRENT_MONTH}-${CURRENT_BRANCH}-${CURRENT_DAY}" >> $GITHUB_OUTPUT
289289 - name : Cache Maven/Gradle Dependency/Dist Caches
290290 id : cache-maven
291- uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
291+ uses : actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
292292 # if it's not a pull request, we restore and save the cache
293293 if : github.event_name != 'pull_request'
294294 with :
@@ -305,7 +305,7 @@ jobs:
305305 ${{ steps.cache-key.outputs.buildtool-monthly-branch-cache-key }}-
306306 ${{ steps.cache-key.outputs.buildtool-monthly-cache-key }}-
307307 - name : Restore Maven/Gradle Dependency/Dist Caches
308- uses : actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
308+ uses : actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
309309 # if it a pull request, we restore the cache but we don't save it
310310 if : github.event_name == 'pull_request'
311311 with :
@@ -331,14 +331,14 @@ jobs:
331331 # The actual publishing must be done in a separate job (see ci-report.yml).
332332 # We don't write to the remote cache as that would be unsafe.
333333 - name : Upload GitHub Actions artifact for the Develocity build scan
334- uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
334+ uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
335335 if : " ${{ github.event_name == 'pull_request' && !cancelled() }}"
336336 with :
337337 name : build-scan-data-sca
338338 path : ~/.gradle/build-scan-data
339339
340340 - name : Upload test reports (if Gradle failed)
341- uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
341+ uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
342342 if : failure()
343343 with :
344344 name : test-reports-java11-sca
0 commit comments