5454    #  Running with HANA requires at least 8GB memory just for the database, which we don't have on GH Actions runners
5555    #           - rdbms: hana
5656    steps :
57-       - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683   #  v4.2.2 
57+       - uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8   #  v5.0.0 
5858        with :
5959          persist-credentials : false 
6060      - name : Reclaim Disk Space 
6464          RDBMS : ${{ matrix.rdbms }} 
6565        run : ci/database-start.sh 
6666      - name : Set up Java 21 
67-         uses : actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00   #  v4.7.1 
67+         uses : actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165   #  v5.0.0 
6868        with :
6969          distribution : ' temurin' 
7070          java-version : ' 21' 
8181          echo "buildtool-cache-key=${ROOT_CACHE_KEY}-${CURRENT_MONTH}-${CURRENT_BRANCH}-${CURRENT_DAY}" >> $GITHUB_OUTPUT 
8282       - name : Cache Maven/Gradle Dependency/Dist Caches 
8383        id : cache-maven 
84-         uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684   #  v4.2.3 
84+         uses : actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830   #  v4.3.0 
8585        #  if it's not a pull request, we restore and save the cache
8686        if : github.event_name != 'pull_request' 
8787        with :
9898            ${{ steps.cache-key.outputs.buildtool-monthly-branch-cache-key }}- 
9999            ${{ steps.cache-key.outputs.buildtool-monthly-cache-key }}- 
100100       - name : Restore Maven/Gradle Dependency/Dist Caches 
101-         uses : actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684   #  v4.2.3 
101+         uses : actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830   #  v4.3.0 
102102        #  if it a pull request, we restore the cache but we don't save it
103103        if : github.event_name == 'pull_request' 
104104        with :
@@ -126,14 +126,14 @@ jobs:
126126      #  The actual publishing must be done in a separate job (see ci-report.yml).
127127      #  We don't write to the remote cache as that would be unsafe.
128128      - name : Upload GitHub Actions artifact for the Develocity build scan 
129-         uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02   #  v4.6.2 
129+         uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4   #  v5.0.0 
130130        if : " ${{ github.event_name == 'pull_request' && !cancelled() }}" 
131131        with :
132132          name : build-scan-data-${{ matrix.rdbms }} 
133133          path : ~/.gradle/build-scan-data 
134134
135135      - name : Upload test reports (if Gradle failed) 
136-         uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02   #  v4.6.2 
136+         uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4   #  v5.0.0 
137137        if : failure() 
138138        with :
139139          name : test-reports-java11-${{ matrix.rdbms }} 
@@ -158,7 +158,7 @@ jobs:
158158          - rdbms : base-database-service-21c 
159159          - rdbms : base-database-service-23ai 
160160    steps :
161-       - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683   #  v4.2.2 
161+       - uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8   #  v5.0.0 
162162        with :
163163          persist-credentials : false 
164164      - name : Set up Java 21 
@@ -178,7 +178,7 @@ jobs:
178178          echo "buildtool-cache-key=${ROOT_CACHE_KEY}-${CURRENT_MONTH}-${CURRENT_BRANCH}-${CURRENT_DAY}" >> $GITHUB_OUTPUT 
179179       - name : Cache Maven/Gradle Dependency/Dist Caches 
180180        id : cache-maven 
181-         uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684   #  v4.2.3 
181+         uses : actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830   #  v4.3.0 
182182        #  if it's not a pull request, we restore and save the cache
183183        if : github.event_name != 'pull_request' 
184184        with :
@@ -195,7 +195,7 @@ jobs:
195195            ${{ steps.cache-key.outputs.buildtool-monthly-branch-cache-key }}- 
196196            ${{ steps.cache-key.outputs.buildtool-monthly-cache-key }}- 
197197       - name : Restore Maven/Gradle Dependency/Dist Caches 
198-         uses : actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684   #  v4.2.3 
198+         uses : actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830   #  v4.3.0 
199199        #  if it is a pull request, we restore the cache but we don't save it
200200        if : github.event_name == 'pull_request' 
201201        with :
@@ -243,13 +243,13 @@ jobs:
243243      #  We don't write to the remote cache as that would be unsafe.
244244      #  That's even on push, because we do not trust Atlas runners to hold secrets: they are shared infrastructure.
245245      - name : Upload GitHub Actions artifact for the Develocity build scan 
246-         uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02   #  v4.6.2 
246+         uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4   #  v5.0.0 
247247        if : " ${{ !cancelled() }}" 
248248        with :
249249          name : build-scan-data-${{ matrix.rdbms }} 
250250          path : ~/.gradle/build-scan-data 
251251      - name : Upload test reports (if Gradle failed) 
252-         uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02   #  v4.6.2 
252+         uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4   #  v5.0.0 
253253        if : failure() 
254254        with :
255255          name : test-reports-java11-${{ matrix.rdbms }} 
@@ -265,13 +265,13 @@ jobs:
265265    name : Static code analysis 
266266    runs-on : ubuntu-latest 
267267    steps :
268-       - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683   #  v4.2.2 
268+       - uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8   #  v5.0.0 
269269        with :
270270          persist-credentials : false 
271271      - name : Reclaim disk space and sanitize user home 
272272        run : .github/ci-prerequisites-atlas.sh 
273273      - name : Set up Java 21 
274-         uses : actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00   #  v4.7.1 
274+         uses : actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165   #  v5.0.0 
275275        with :
276276          distribution : ' temurin' 
277277          java-version : ' 21' 
@@ -288,7 +288,7 @@ jobs:
288288          echo "buildtool-cache-key=${ROOT_CACHE_KEY}-${CURRENT_MONTH}-${CURRENT_BRANCH}-${CURRENT_DAY}" >> $GITHUB_OUTPUT 
289289       - name : Cache Maven/Gradle Dependency/Dist Caches 
290290        id : cache-maven 
291-         uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684   #  v4.2.3 
291+         uses : actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830   #  v4.3.0 
292292        #  if it's not a pull request, we restore and save the cache
293293        if : github.event_name != 'pull_request' 
294294        with :
@@ -305,7 +305,7 @@ jobs:
305305            ${{ steps.cache-key.outputs.buildtool-monthly-branch-cache-key }}- 
306306            ${{ steps.cache-key.outputs.buildtool-monthly-cache-key }}- 
307307       - name : Restore Maven/Gradle Dependency/Dist Caches 
308-         uses : actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684   #  v4.2.3 
308+         uses : actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830   #  v4.3.0 
309309        #  if it a pull request, we restore the cache but we don't save it
310310        if : github.event_name == 'pull_request' 
311311        with :
@@ -331,14 +331,14 @@ jobs:
331331      #  The actual publishing must be done in a separate job (see ci-report.yml).
332332      #  We don't write to the remote cache as that would be unsafe.
333333      - name : Upload GitHub Actions artifact for the Develocity build scan 
334-         uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02   #  v4.6.2 
334+         uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4   #  v5.0.0 
335335        if : " ${{ github.event_name == 'pull_request' && !cancelled() }}" 
336336        with :
337337          name : build-scan-data-sca 
338338          path : ~/.gradle/build-scan-data 
339339
340340      - name : Upload test reports (if Gradle failed) 
341-         uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02   #  v4.6.2 
341+         uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4   #  v5.0.0 
342342        if : failure() 
343343        with :
344344          name : test-reports-java11-sca 
0 commit comments