From a6fc2b4f5b1fe2ac4321df2ed8404d637b4d4291 Mon Sep 17 00:00:00 2001 From: Stefan Seifert Date: Mon, 1 Jun 2026 18:43:06 +0200 Subject: [PATCH 1/2] apply pin only for smoke test --- .github/renovate.json | 5 +++++ .github/workflows/smoke-test.yml | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/.github/renovate.json b/.github/renovate.json index 9de3e57..8a7c8ee 100644 --- a/.github/renovate.json +++ b/.github/renovate.json @@ -7,5 +7,10 @@ "github>wcm-io/renovate-config:automerge-testing", "github>wcm-io-devops/renovate-config:automerge-parent", "helpers:pinGitHubActionDigests" + ], + "ignoreDeps": [ + "wcm-io-devops/github-action-maven-build-sonar", + "wcm-io-devops/github-action-maven-deploy", + "wcm-io-devops/github-action-release-from-tag" ] } diff --git a/.github/workflows/smoke-test.yml b/.github/workflows/smoke-test.yml index 4facf00..faac845 100644 --- a/.github/workflows/smoke-test.yml +++ b/.github/workflows/smoke-test.yml @@ -22,7 +22,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@v6 - name: Set up JDK ${{ matrix.java }} uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5 From ecee8687d41b343e3ab5954497140064412a4428 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 1 Jun 2026 16:55:50 +0000 Subject: [PATCH 2/2] Pin actions/checkout action to de0fac2 --- .github/workflows/smoke-test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/smoke-test.yml b/.github/workflows/smoke-test.yml index faac845..4facf00 100644 --- a/.github/workflows/smoke-test.yml +++ b/.github/workflows/smoke-test.yml @@ -22,7 +22,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Set up JDK ${{ matrix.java }} uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5