From 14f78d59538ab41e58bb306a4ffb48f632e77c99 Mon Sep 17 00:00:00 2001
From: Joas Schilling <coding@schilljs.com>
Date: Sun, 16 Mar 2025 15:01:53 +0100
Subject: [PATCH] fix: Pin versions in workflows

Signed-off-by: Joas Schilling <coding@schilljs.com>
---
 workflow-templates/block-merge-eol.yml                    | 2 +-
 workflow-templates/block-merge-freeze.yml                 | 2 +-
 workflow-templates/cypress.yml                            | 4 ++--
 workflow-templates/pr-feedback.yml                        | 2 +-
 workflow-templates/renovate-approve-merge.yml             | 2 +-
 workflow-templates/update-nextcloud-ocp-approve-merge.yml | 2 +-
 6 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/workflow-templates/block-merge-eol.yml b/workflow-templates/block-merge-eol.yml
index 99042c44..31f84a99 100644
--- a/workflow-templates/block-merge-eol.yml
+++ b/workflow-templates/block-merge-eol.yml
@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Set server major version environment
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           github-token: ${{secrets.GITHUB_TOKEN}}
           script: |
diff --git a/workflow-templates/block-merge-freeze.yml b/workflow-templates/block-merge-freeze.yml
index ff4d1570..f28a0210 100644
--- a/workflow-templates/block-merge-freeze.yml
+++ b/workflow-templates/block-merge-freeze.yml
@@ -29,7 +29,7 @@ jobs:
 
     steps:
       - name: Register server reference to fallback to master branch
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           github-token: ${{secrets.GITHUB_TOKEN}}
           script: |
diff --git a/workflow-templates/cypress.yml b/workflow-templates/cypress.yml
index 8eaa82dc..4a395d87 100644
--- a/workflow-templates/cypress.yml
+++ b/workflow-templates/cypress.yml
@@ -81,7 +81,7 @@ jobs:
           TESTING=true npm run build --if-present
 
       - name: Save context
-        uses: buildjet/cache/save@v4
+        uses: buildjet/cache/save@3e70d19e31d6a8030aeddf6ed8dbe601f94d09f4 # v4.0.2
         with:
           key: cypress-context-${{ github.run_id }}
           path: ./
@@ -101,7 +101,7 @@ jobs:
 
     steps:
       - name: Restore context
-        uses: buildjet/cache/restore@v4
+        uses: buildjet/cache/restore@3e70d19e31d6a8030aeddf6ed8dbe601f94d09f4 # v4.0.2
         with:
           fail-on-cache-miss: true
           key: cypress-context-${{ github.run_id }}
diff --git a/workflow-templates/pr-feedback.yml b/workflow-templates/pr-feedback.yml
index 7d496690..98e9fada 100644
--- a/workflow-templates/pr-feedback.yml
+++ b/workflow-templates/pr-feedback.yml
@@ -36,7 +36,7 @@ jobs:
           blocklist=$(curl https://raw.githubusercontent.com/nextcloud/.github/master/non-community-usernames.txt | paste -s -d, -)
           echo "blocklist=$blocklist" >> "$GITHUB_OUTPUT"
 
-      - uses: marcelklehr/pr-feedback-action@1883b38a033fb16f576875e0cf45f98b857655c4
+      - uses: nextcloud/pr-feedback-action@1883b38a033fb16f576875e0cf45f98b857655c4 # main
         with:
           feedback-message: |
             Hello there,
diff --git a/workflow-templates/renovate-approve-merge.yml b/workflow-templates/renovate-approve-merge.yml
index a10d17fd..ccfed397 100644
--- a/workflow-templates/renovate-approve-merge.yml
+++ b/workflow-templates/renovate-approve-merge.yml
@@ -52,7 +52,7 @@ jobs:
 
       # Enable GitHub auto merge
       - name: Auto merge
-        uses: alexwilson/enable-github-automerge-action@main
+        uses: alexwilson/enable-github-automerge-action@56e3117d1ae1540309dc8f7a9f2825bc3c5f06ff # v2.0.0
         if: startsWith(steps.branchname.outputs.branch, 'renovate/')
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/workflow-templates/update-nextcloud-ocp-approve-merge.yml b/workflow-templates/update-nextcloud-ocp-approve-merge.yml
index 386b6316..dfe0ef4e 100644
--- a/workflow-templates/update-nextcloud-ocp-approve-merge.yml
+++ b/workflow-templates/update-nextcloud-ocp-approve-merge.yml
@@ -52,7 +52,7 @@ jobs:
 
       # Enable GitHub auto merge
       - name: Auto merge
-        uses: alexwilson/enable-github-automerge-action@56e3117d1ae1540309dc8f7a9f2825bc3c5f06ff # main
+        uses: alexwilson/enable-github-automerge-action@56e3117d1ae1540309dc8f7a9f2825bc3c5f06ff # v2.0.0
         if: startsWith(steps.branchname.outputs.branch, 'automated/noid/') && endsWith(steps.branchname.outputs.branch, 'update-nextcloud-ocp')
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}