@@ -14,12 +14,12 @@ jobs:
14
14
runs-on : ubuntu-latest
15
15
steps :
16
16
- name : Checkout repository
17
- uses : actions/checkout@v4
17
+ uses : actions/checkout@v5
18
18
with :
19
19
token : ${{ secrets.GH_TOKEN }}
20
20
- uses : gradle/actions/wrapper-validation@v4
21
21
- name : Set up JDK
22
- uses : actions/setup-java@v4
22
+ uses : actions/setup-java@v5
23
23
with :
24
24
distribution : ' temurin'
25
25
java-version : |
@@ -117,7 +117,7 @@ jobs:
117
117
artifacts-sha256 : ${{ steps.set-hash.outputs.artifacts-sha256 }}
118
118
steps :
119
119
- name : Download artifacts-sha256
120
- uses : actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3 .0
120
+ uses : actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0 .0
121
121
with :
122
122
name : artifacts-sha256
123
123
# The SLSA provenance generator expects the hash digest of artifacts to be passed as a job
@@ -148,9 +148,9 @@ jobs:
148
148
if : startsWith(github.ref, 'refs/tags/')
149
149
steps :
150
150
- name : Checkout repository
151
- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
151
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
152
152
- name : Download artifacts
153
- uses : actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3 .0
153
+ uses : actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0 .0
154
154
with :
155
155
name : gradle-build-outputs
156
156
path : build/repo
0 commit comments