From 082aa4363d9fdf68ef11e8bf73a9f0d06056ad29 Mon Sep 17 00:00:00 2001 From: Bernard Ladenthin Date: Sun, 25 Oct 2026 20:37:26 +0100 Subject: [PATCH] Pin bernardladenthin/actions v1.0.1 v1.0.1 (df774809) lets the Central gate of java/finalize-publication skip the resolver's _remote.repositories, which central-publishing 0.12.0 writes into the snapshot staging and which failed the first snapshot runs on v1.0.0 (bernardladenthin/actions#2). The templates are unchanged for this repository (checked with actionlib.common.templates at v1.0.1: 0 problems). Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01VszvDmRRPP1UcwozsUMY1L --- .github/workflows/codeql.yml | 2 +- .github/workflows/dependency-submission.yml | 2 +- .github/workflows/formal-verification.yml | 6 +-- .github/workflows/osv-scanner.yml | 2 +- .github/workflows/publish.yml | 44 ++++++++++----------- .github/workflows/reuse.yml | 2 +- .github/workflows/sonarqube.yml | 2 +- 7 files changed, 30 insertions(+), 30 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index fe965ac..d8ec0c9 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -18,7 +18,7 @@ permissions: jobs: analyze: - uses: bernardladenthin/actions/.github/workflows/java-codeql.yml@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/.github/workflows/java-codeql.yml@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 permissions: actions: read contents: read diff --git a/.github/workflows/dependency-submission.yml b/.github/workflows/dependency-submission.yml index d1c7687..8294a72 100644 --- a/.github/workflows/dependency-submission.yml +++ b/.github/workflows/dependency-submission.yml @@ -16,6 +16,6 @@ permissions: jobs: submit: - uses: bernardladenthin/actions/.github/workflows/java-maven-dependency-submission.yml@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/.github/workflows/java-maven-dependency-submission.yml@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 permissions: contents: write diff --git a/.github/workflows/formal-verification.yml b/.github/workflows/formal-verification.yml index da5f427..c98a4d7 100644 --- a/.github/workflows/formal-verification.yml +++ b/.github/workflows/formal-verification.yml @@ -89,7 +89,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/common/print-host-info@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 - uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6 with: java-version-file: .java-version @@ -144,7 +144,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/common/print-host-info@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 - uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6 with: java-version-file: .java-version @@ -226,7 +226,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/common/print-host-info@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 - uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6 with: # 25 builds the repo's Java-8 production classes (matching the shipped bytecode); diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml index 534c3b9..7c322e3 100644 --- a/.github/workflows/osv-scanner.yml +++ b/.github/workflows/osv-scanner.yml @@ -19,7 +19,7 @@ permissions: jobs: scan: - uses: bernardladenthin/actions/.github/workflows/osv-scanner.yml@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/.github/workflows/osv-scanner.yml@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 permissions: actions: read contents: read diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 34b90d1..9e2a1e0 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -77,15 +77,15 @@ jobs: with: persist-credentials: false - name: Files equal their templates in bernardladenthin/actions - uses: bernardladenthin/actions/common/check-templates@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/common/check-templates@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 - name: Release gate (every job gates both publish jobs, or release-gate-exemptions.txt says why) - uses: bernardladenthin/actions/common/check-release-gate@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/common/check-release-gate@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 - name: Run scripts parse (bash -n over every bash run script of the workflows and actions) - uses: bernardladenthin/actions/common/check-run-scripts@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/common/check-run-scripts@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 - name: Maven versions (warns where a dependency or plugin differs from a sibling repository) - uses: bernardladenthin/actions/java/check-maven-versions@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/java/check-maven-versions@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 - name: Publication wiring and release asset contract (dry run) - uses: bernardladenthin/actions/java/check-publication@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/java/check-publication@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 # --------------------------------------------------------------------------- # GPG signing-key preflight (standalone, no `needs:` -- runs in parallel at the @@ -101,7 +101,7 @@ jobs: runs-on: ubuntu-latest environment: maven-central steps: - - uses: bernardladenthin/actions/common/verify-gpg-key@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + - uses: bernardladenthin/actions/common/verify-gpg-key@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 with: private-key: ${{ secrets.GPG_PRIVATE_KEY }} passphrase: ${{ secrets.GPG_PASSPHRASE }} @@ -121,7 +121,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false - - uses: bernardladenthin/actions/java/verify-signing-key-gradle@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + - uses: bernardladenthin/actions/java/verify-signing-key-gradle@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 with: private-key: ${{ secrets.GPG_PRIVATE_KEY }} passphrase: ${{ secrets.GPG_PASSPHRASE }} @@ -135,7 +135,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false - - uses: bernardladenthin/actions/java/maven-code-style@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + - uses: bernardladenthin/actions/java/maven-code-style@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 with: package-pattern: 'net\.ladenthin\.' @@ -186,7 +186,7 @@ jobs: # unconditionally because a classpath JVM never loads them. Runs before the smoke test so an # unloadable class is reported as such instead of as a mysterious smoke failure. - name: Verify Java 8 bytecode (no class newer than major 52) - uses: bernardladenthin/actions/java/verify-bytecode@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/java/verify-bytecode@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 with: max-major: "52" paths: | @@ -201,7 +201,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/common/print-host-info@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 - uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6 with: java-version-file: .java-version @@ -222,7 +222,7 @@ jobs: # Echo the crash logs into the job log (workspace/policies/ci-test-diagnostics.md 3.1). - name: Print crash logs (on failure) if: failure() - uses: bernardladenthin/actions/java/print-crash-logs@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/java/print-crash-logs@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 with: modules: . - name: Upload crash & surefire dumps @@ -246,7 +246,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/common/print-host-info@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 - uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6 with: { java-version-file: .java-version, distribution: temurin, cache: maven } - name: Test under vmlens @@ -331,7 +331,7 @@ jobs: # a release is tagged on. - name: Require a SNAPSHOT version if: inputs.publish_to_central - uses: bernardladenthin/actions/java/check-release-ref@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/java/check-release-ref@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 with: channel: snapshot @@ -346,7 +346,7 @@ jobs: persist-credentials: false # The tag names exactly the project version (v1.2.3 for 1.2.3), which is no SNAPSHOT. - name: Require the release version the tag names - uses: bernardladenthin/actions/java/check-release-ref@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/java/check-release-ref@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 with: channel: release @@ -394,7 +394,7 @@ jobs: MAVEN_GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }} - name: Finalize and secure the signed publication id: finalize - uses: bernardladenthin/actions/java/finalize-publication@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/java/finalize-publication@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 with: channel: snapshot @@ -410,7 +410,7 @@ jobs: permissions: contents: write steps: - - uses: bernardladenthin/actions/java/publish-github@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + - uses: bernardladenthin/actions/java/publish-github@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 with: channel: snapshot assets-complete: ${{ needs.publish-snapshot.outputs.assets_complete }} @@ -451,7 +451,7 @@ jobs: MAVEN_GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }} - name: Finalize and secure the signed publication id: finalize - uses: bernardladenthin/actions/java/finalize-publication@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/java/finalize-publication@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 with: channel: release @@ -464,7 +464,7 @@ jobs: permissions: contents: write steps: - - uses: bernardladenthin/actions/java/publish-github@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + - uses: bernardladenthin/actions/java/publish-github@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 with: channel: release assets-complete: ${{ needs.publish-release.outputs.assets_complete }} @@ -489,7 +489,7 @@ jobs: with: persist-credentials: false - name: Transfer frozen artifacts (no rebuild, signing or validation polling) - uses: bernardladenthin/actions/java/publish-central@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/java/publish-central@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 with: channel: snapshot assets-complete: ${{ needs.publish-snapshot.outputs.assets_complete }} @@ -510,7 +510,7 @@ jobs: with: persist-credentials: false - name: Transfer frozen artifacts (no rebuild, signing or validation polling) - uses: bernardladenthin/actions/java/publish-central@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/java/publish-central@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 with: channel: release assets-complete: ${{ needs.publish-release.outputs.assets_complete }} @@ -528,7 +528,7 @@ jobs: id-token: write attestations: write steps: - - uses: bernardladenthin/actions/java/attest-publication@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + - uses: bernardladenthin/actions/java/attest-publication@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 with: channel: snapshot assets-complete: ${{ needs.publish-snapshot.outputs.assets_complete }} @@ -544,7 +544,7 @@ jobs: id-token: write attestations: write steps: - - uses: bernardladenthin/actions/java/attest-publication@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + - uses: bernardladenthin/actions/java/attest-publication@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 with: channel: release assets-complete: ${{ needs.publish-release.outputs.assets_complete }} diff --git a/.github/workflows/reuse.yml b/.github/workflows/reuse.yml index b750518..9371272 100644 --- a/.github/workflows/reuse.yml +++ b/.github/workflows/reuse.yml @@ -14,4 +14,4 @@ permissions: jobs: test: - uses: bernardladenthin/actions/.github/workflows/reuse.yml@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/.github/workflows/reuse.yml@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml index 30b7df0..1dd1ecb 100644 --- a/.github/workflows/sonarqube.yml +++ b/.github/workflows/sonarqube.yml @@ -18,6 +18,6 @@ permissions: jobs: build: - uses: bernardladenthin/actions/.github/workflows/java-sonarqube.yml@7646ab0603d75ee130463eceaa8988f7352e2d6a # v1.0.0 + uses: bernardladenthin/actions/.github/workflows/java-sonarqube.yml@df774809fbe99a5adc7b1243d053692cd840fe05 # v1.0.1 secrets: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}