@@ -45,10 +45,10 @@ jobs:
4545
4646 steps :
4747 - name : Checkout code
48- uses : actions/checkout@v6
48+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
4949
5050 - name : Setup PHP
51- uses : shivammathur/setup-php@v2
51+ uses : shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
5252 with :
5353 php-version : " 8.5"
5454 coverage : none
6161 echo "dir=$(composer config cache-files-dir)" >> "$GITHUB_OUTPUT"
6262
6363 - name : Cache Composer cache directory
64- uses : actions/cache@v5
64+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
6565 with :
6666 path : ${{ steps.composer-cache.outputs.dir }}
6767 key : ${{ runner.os }}-composer-${{ hashFiles('composer.json', 'composer.lock') }}
@@ -90,10 +90,10 @@ jobs:
9090
9191 steps :
9292 - name : Checkout code
93- uses : actions/checkout@v6
93+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
9494
9595 - name : Setup PHP
96- uses : shivammathur/setup-php@v2
96+ uses : shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
9797 with :
9898 php-version : ${{ matrix.php }}
9999 tools : composer, pecl
@@ -106,7 +106,7 @@ jobs:
106106 echo "dir=$(composer config cache-files-dir)" >> "$GITHUB_OUTPUT"
107107
108108 - name : Cache Composer cache directory
109- uses : actions/cache@v5
109+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
110110 with :
111111 path : ${{ steps.composer-cache.outputs.dir }}
112112 key : ${{ runner.os }}-composer-${{ hashFiles('composer.json', 'composer.lock') }}
@@ -116,7 +116,7 @@ jobs:
116116 run : composer install --no-interaction --no-progress --ansi --ignore-platform-req=ext-grpc
117117
118118 - name : Cache PHPStan dependencies
119- uses : actions/cache@v5
119+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
120120 with :
121121 path : tools/.phpstan/vendor
122122 key : ${{ runner.os }}-phpstan-tools-${{ hashFiles('tools/.phpstan/composer.lock') }}
@@ -139,10 +139,10 @@ jobs:
139139
140140 steps :
141141 - name : Checkout code
142- uses : actions/checkout@v6
142+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
143143
144144 - name : Setup PHP
145- uses : shivammathur/setup-php@v2
145+ uses : shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
146146 with :
147147 php-version : " 8.5"
148148 tools : composer
@@ -155,7 +155,7 @@ jobs:
155155 echo "dir=$(composer config cache-files-dir)" >> "$GITHUB_OUTPUT"
156156
157157 - name : Cache Composer cache directory
158- uses : actions/cache@v5
158+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
159159 with :
160160 path : ${{ steps.composer-cache.outputs.dir }}
161161 key : ${{ runner.os }}-composer-${{ hashFiles('composer.json', 'composer.lock') }}
@@ -192,10 +192,10 @@ jobs:
192192
193193 steps :
194194 - name : Checkout code
195- uses : actions/checkout@v6
195+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
196196
197197 - name : Setup PHP
198- uses : shivammathur/setup-php@v2
198+ uses : shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
199199 with :
200200 php-version : ${{ matrix.php }}
201201 tools : composer, pecl
@@ -208,7 +208,7 @@ jobs:
208208 echo "dir=$(composer config cache-files-dir)" >> "$GITHUB_OUTPUT"
209209
210210 - name : Cache Composer cache directory
211- uses : actions/cache@v5
211+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
212212 with :
213213 path : ${{ steps.composer-cache.outputs.dir }}
214214 key : ${{ runner.os }}-composer-${{ hashFiles('composer.json', 'composer.lock') }}
@@ -219,7 +219,7 @@ jobs:
219219
220220 - name : Cache Rector dependencies
221221 if : ${{ matrix.id == 'rector' }}
222- uses : actions/cache@v5
222+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
223223 with :
224224 path : tools/.rector/vendor
225225 key : ${{ runner.os }}-rector-tools-${{ hashFiles('tools/.rector/composer.lock') }}
@@ -252,10 +252,10 @@ jobs:
252252
253253 steps :
254254 - name : Checkout code
255- uses : actions/checkout@v6
255+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
256256
257257 - name : Setup PHP
258- uses : shivammathur/setup-php@v2
258+ uses : shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
259259 with :
260260 php-version : ${{ matrix.php }}
261261 tools : composer, pecl
@@ -268,7 +268,7 @@ jobs:
268268 echo "dir=$(composer config cache-files-dir)" >> "$GITHUB_OUTPUT"
269269
270270 - name : Cache Composer cache directory
271- uses : actions/cache@v5
271+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
272272 with :
273273 path : ${{ steps.composer-cache.outputs.dir }}
274274 key : ${{ runner.os }}-composer-${{ hashFiles('composer.json', 'composer.lock') }}
@@ -300,10 +300,10 @@ jobs:
300300
301301 steps :
302302 - name : Checkout code
303- uses : actions/checkout@v6
303+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
304304
305305 - name : Setup PHP
306- uses : shivammathur/setup-php@v2
306+ uses : shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
307307 with :
308308 php-version : " 8.5"
309309 tools : composer, pecl
@@ -316,7 +316,7 @@ jobs:
316316 echo "dir=$(composer config cache-files-dir)" >> "$GITHUB_OUTPUT"
317317
318318 - name : Cache Composer cache directory
319- uses : actions/cache@v5
319+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
320320 with :
321321 path : ${{ steps.composer-cache.outputs.dir }}
322322 key : ${{ runner.os }}-composer-${{ hashFiles('composer.json', 'composer.lock') }}
@@ -332,7 +332,7 @@ jobs:
332332 run : echo "::add-matcher::${{ runner.tool_cache }}/phpunit.json"
333333
334334 - name : Cache PHPUnit static analysis cache
335- uses : actions/cache@v5
335+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
336336 with :
337337 path : .phpunit.cache/code-coverage
338338 key : ${{ runner.os }}-phpunit-code-coverage-${{ github.ref }}-
@@ -349,7 +349,7 @@ jobs:
349349
350350 - name : Upload test results to Codecov
351351 if : ${{ !cancelled() }}
352- uses : codecov/codecov-action@v5
352+ uses : codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5
353353 with :
354354 token : ${{ secrets.CODECOV_TOKEN }}
355355 flags : unit
@@ -359,7 +359,7 @@ jobs:
359359
360360 - name : Upload coverage to Codecov
361361 if : ${{ !cancelled() }}
362- uses : codecov/codecov-action@v5
362+ uses : codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5
363363 with :
364364 token : ${{ secrets.CODECOV_TOKEN }}
365365 files : ./build/code-coverage.xml
@@ -375,7 +375,7 @@ jobs:
375375
376376 steps :
377377 - name : Checkout code
378- uses : actions/checkout@v6
378+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
379379 with :
380380 fetch-depth : 0
381381 fetch-tags : true
@@ -397,7 +397,7 @@ jobs:
397397
398398 - name : Run Roave BC Check
399399 if : ${{ steps.check-tags.outputs.has_tags == 'true' }}
400- uses : docker://nyholm/roave-bc-check-ga
400+ uses : docker://nyholm/roave-bc-check-ga@sha256:a9d3d932a4d3ba6a5a0563ef3788918a538198ee9c061a153f9b55caa8d3625f
401401
402402 - name : Skip Roave BC Check (no tags found)
403403 if : ${{ steps.check-tags.outputs.has_tags != 'true' }}
0 commit comments