From 93bce7b94344d61f3f6c8213910259b0103ba533 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=EC=9D=BC=ED=98=81?= Date: Wed, 7 Oct 2026 07:15:50 +0000 Subject: [PATCH] Revert "Merge pull request #299 from Afternote/1hyok/chore/297-actions-sha-pinning" This reverts commit a008417b6df3386f79af3c2cbc249500156cd10b, reversing changes made to cc509eabd20404d93a54aa1ea174ec5d91f9d001. --- .github/workflows/ci.yml | 30 ++++++++++----------- .github/workflows/codeql.yml | 6 ++--- .github/workflows/dependency-submission.yml | 6 ++--- .github/workflows/quality.yml | 2 +- 4 files changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 44c20d0d..0f53e764 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -27,16 +27,16 @@ jobs: steps: - name: Checkout source code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7 - name: Set up JDK 17 - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0 + uses: actions/setup-java@v5 with: distribution: temurin java-version: 17 - name: Generate and submit dependency graph - uses: gradle/actions/dependency-submission@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 + uses: gradle/actions/dependency-submission@v6 with: cache-provider: basic @@ -49,10 +49,10 @@ jobs: steps: - name: Checkout source code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7 - name: Review dependency changes - uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0 + uses: actions/dependency-review-action@v5 with: fail-on-severity: high retry-on-snapshot-warnings: true @@ -65,16 +65,16 @@ jobs: steps: - name: Checkout source code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7 - name: Set up JDK - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0 + uses: actions/setup-java@v5 with: distribution: temurin java-version: 17 - name: Set up Gradle - uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 + uses: gradle/actions/setup-gradle@v6 with: cache-provider: basic @@ -86,7 +86,7 @@ jobs: - name: Upload test report if: failure() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@v7 with: name: gradle-test-report path: | @@ -101,16 +101,16 @@ jobs: steps: - name: Checkout source code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7 - name: Set up JDK - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0 + uses: actions/setup-java@v5 with: distribution: temurin java-version: 17 - name: Set up Gradle - uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 + uses: gradle/actions/setup-gradle@v6 with: cache-provider: basic @@ -122,7 +122,7 @@ jobs: - name: Upload MySQL test report if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@v7 with: name: mysql-test-report path: | @@ -163,7 +163,7 @@ jobs: steps: - name: Checkout source code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7 - name: Build current Docker image run: docker build -t afternote-server:ci . @@ -241,7 +241,7 @@ jobs: - name: Upload HTTP smoke log if: failure() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@v7 with: name: http-smoke-log path: build/reports/http-smoke/ diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 46eda8ea..ef586e0a 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -26,13 +26,13 @@ jobs: steps: - name: Checkout source code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7 - name: Initialize CodeQL - uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/init@v4 with: languages: java-kotlin build-mode: none - name: Analyze - uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/analyze@v4 diff --git a/.github/workflows/dependency-submission.yml b/.github/workflows/dependency-submission.yml index 8b211243..cd232e94 100644 --- a/.github/workflows/dependency-submission.yml +++ b/.github/workflows/dependency-submission.yml @@ -15,15 +15,15 @@ jobs: steps: - name: Checkout source code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7 - name: Set up JDK 17 - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0 + uses: actions/setup-java@v5 with: distribution: temurin java-version: 17 - name: Generate and submit dependency graph - uses: gradle/actions/dependency-submission@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 + uses: gradle/actions/dependency-submission@v6 with: cache-provider: basic diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml index 8407bdb9..a1ad5f2d 100644 --- a/.github/workflows/quality.yml +++ b/.github/workflows/quality.yml @@ -21,7 +21,7 @@ jobs: steps: - name: Checkout source code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7 - name: Install actionlint and ShellCheck env: