Merge pull request #299 from domaframework/renovate/pin-dependencies

Author: nakamura-to

.github/workflows/gradle.yml

@@ -13,23 +13,23 @@ jobs:
     timeout-minutes: 15
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
 
     - name: Set up JDK 17
-      uses: actions/setup-java@v5
+      uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5
       with:
         distribution: 'zulu'
         java-version: 17
 
     - name: Set up Gradle
-      uses: gradle/[email protected]
+      uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3.5.0
 
     - name: Build with Gradle
       run: ./gradlew build
 
     - name: Upload reports
       if: failure()
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
       with:
         name: report
         path: ./**/build/reports