This is an automated email from the ASF dual-hosted git repository.
adamsaghy pushed a commit to branch develop
in repository https://gitbox.apache.org/repos/asf/fineract.git
The following commit(s) were added to refs/heads/develop by this push:
new b57b7e8c4b FINERACT-2181: Pin dependencies
b57b7e8c4b is described below
commit b57b7e8c4b0eb38c9ccfcec728c45fe73666fb2b
Author: Renovate <[email protected]>
AuthorDate: Mon Feb 23 15:45:13 2026 +0000
FINERACT-2181: Pin dependencies
---
.github/workflows/build-documentation.yml | 2 +-
.github/workflows/mifos-fineract-client-publish.yml | 2 +-
.github/workflows/verify-api-backward-compatibility.yml | 4 ++--
.github/workflows/verify-commits.yml | 2 +-
.github/workflows/verify-liquibase-backward-compatibility.yml | 2 +-
5 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/.github/workflows/build-documentation.yml
b/.github/workflows/build-documentation.yml
index 0bcc4ecb1d..939e3b60fc 100644
--- a/.github/workflows/build-documentation.yml
+++ b/.github/workflows/build-documentation.yml
@@ -26,7 +26,7 @@ jobs:
- name: Congfigure vega-cli
run: npm i -g vega-cli --unsafe
- name: Validate Gradle wrapper
- uses: gradle/actions/[email protected]
+ uses:
gradle/actions/wrapper-validation@f29f5a9d7b09a7c6b29859002d29d24e1674c884 #
v5.0.1
- name: Install additional software
run: |
sudo apt-get update
diff --git a/.github/workflows/mifos-fineract-client-publish.yml
b/.github/workflows/mifos-fineract-client-publish.yml
index f02220c0b0..f2ec15f443 100644
--- a/.github/workflows/mifos-fineract-client-publish.yml
+++ b/.github/workflows/mifos-fineract-client-publish.yml
@@ -22,7 +22,7 @@ jobs:
with:
fetch-depth: 0
- name: Generate build number
- uses: onyxmueller/build-tag-number@v1
+ uses:
onyxmueller/build-tag-number@4a0c81c9af350d967032d49204c83c38e6b0c8e4 # v1
with:
token: ${{ secrets.GITHUB_TOKEN }}
- name: Set up JDK 21
diff --git a/.github/workflows/verify-api-backward-compatibility.yml
b/.github/workflows/verify-api-backward-compatibility.yml
index d154cb58b7..4b2a059cec 100644
--- a/.github/workflows/verify-api-backward-compatibility.yml
+++ b/.github/workflows/verify-api-backward-compatibility.yml
@@ -24,7 +24,7 @@ jobs:
path: baseline
- name: Set up JDK 21
- uses: actions/setup-java@v5
+ uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
with:
distribution: 'zulu'
java-version: '21'
@@ -212,7 +212,7 @@ jobs:
- name: Archive breaking change report
if: always()
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
# v4
with:
name: api-compatibility-report
path: current/fineract-provider/build/swagger-brake/
diff --git a/.github/workflows/verify-commits.yml
b/.github/workflows/verify-commits.yml
index dec454f059..0efc73d081 100644
--- a/.github/workflows/verify-commits.yml
+++ b/.github/workflows/verify-commits.yml
@@ -31,7 +31,7 @@ jobs:
timeout-minutes: 1
steps:
- name: Checkout
- uses: actions/checkout@v6
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
with:
fetch-depth: 0
diff --git a/.github/workflows/verify-liquibase-backward-compatibility.yml
b/.github/workflows/verify-liquibase-backward-compatibility.yml
index 17118a05f6..0c0536207f 100644
--- a/.github/workflows/verify-liquibase-backward-compatibility.yml
+++ b/.github/workflows/verify-liquibase-backward-compatibility.yml
@@ -39,7 +39,7 @@ jobs:
fetch-depth: 0
- name: Set up JDK 21
- uses: actions/setup-java@v5
+ uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
with:
distribution: 'zulu'
java-version: '21'
