chore: repo gardening (#1276)

.fossa.yml

@@ -0,0 +1,8 @@
+version: 3
+
+# https://github.com/fossas/fossa-cli/blob/master/docs/references/files/fossa-yml.md
+
+paths:
+  exclude:
+    - ./integration-test
+    - ./native-image-tests

.github/workflows/checks.yml

@@ -17,7 +17,9 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        # https://github.com/actions/checkout/releases
+        # v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           # we don't know what commit the last tag was it's safer to get entire repo so previousStableVersion resolves
           fetch-depth: 0
@@ -29,10 +31,14 @@ jobs:
           git checkout scratch
 
       - name: Cache Coursier cache
-        uses: coursier/[email protected]
+        # https://github.com/coursier/cache-action/releases
+        # v6.4.5
+        uses: coursier/cache-action@1ff273bff02a8787bc9f1877d347948af647956d
 
       - name: Set up JDK 11
-        uses: coursier/[email protected]
+        # https://github.com/coursier/setup-action/releases
+        # v1.3.5
+        uses: coursier/setup-action@7bde40eee928896f074dbb76d22dd772eed5c65f
         with:
           jvm: temurin:1.11.0
 
@@ -47,7 +53,9 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        # https://github.com/actions/checkout/releases
+        # v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
@@ -58,10 +66,14 @@ jobs:
           git checkout scratch
 
       - name: Cache Coursier cache
-        uses: coursier/[email protected]
+        # https://github.com/coursier/cache-action/releases
+        # v6.4.5
+        uses: coursier/cache-action@1ff273bff02a8787bc9f1877d347948af647956d
 
       - name: Set up JDK 17
-        uses: coursier/[email protected]
+        # https://github.com/coursier/setup-action/releases
+        # v1.3.5
+        uses: coursier/setup-action@7bde40eee928896f074dbb76d22dd772eed5c65f
         with:
           jvm: temurin:1.17.0
 

.github/workflows/fossa.yml

@@ -15,16 +15,22 @@ jobs:
     if: github.repository == 'akka/akka-management'
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        # https://github.com/actions/checkout/releases
+        # v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           # we don't know what commit the last tag was it's safer to get entire repo so previousStableVersion resolves
           fetch-depth: 0
 
       - name: Cache Coursier cache
-        uses: coursier/[email protected]
+        # https://github.com/coursier/cache-action/releases
+        # v6.4.5
+        uses: coursier/cache-action@1ff273bff02a8787bc9f1877d347948af647956d
 
       - name: Set up JDK 17
-        uses: coursier/[email protected]
+        # https://github.com/coursier/setup-action/releases
+        # v1.3.5
+        uses: coursier/setup-action@7bde40eee928896f074dbb76d22dd772eed5c65f
         with:
           jvm: temurin:1.17
 

.github/workflows/integration-tests-app-version-revision.yml

@@ -18,11 +18,11 @@ jobs:
    integration-test:
     name: Integration Tests for AppVersionRevision
     runs-on: ubuntu-22.04
-    strategy:
-      fail-fast: false    
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        # https://github.com/actions/checkout/releases
+        # v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
@@ -33,10 +33,14 @@ jobs:
           git checkout scratch
 
       - name: Cache Coursier cache
-        uses: coursier/[email protected]
+        # https://github.com/coursier/cache-action/releases
+        # v6.4.5
+        uses: coursier/cache-action@1ff273bff02a8787bc9f1877d347948af647956d
 
       - name: Set up JDK 11
-        uses: coursier/[email protected]
+        # https://github.com/coursier/setup-action/releases
+        # v1.3.5
+        uses: coursier/setup-action@7bde40eee928896f074dbb76d22dd772eed5c65f
         with:
           jvm: temurin:1.11.0
 

.github/workflows/integration-tests-kube-api.yml

@@ -17,11 +17,11 @@ jobs:
    integration-test:
     name: Integration Tests for Kubernetes API
     runs-on: ubuntu-22.04
-    strategy:
-      fail-fast: false    
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        # https://github.com/actions/checkout/releases
+        # v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
@@ -32,10 +32,14 @@ jobs:
           git checkout scratch
 
       - name: Cache Coursier cache
-        uses: coursier/[email protected]
+        # https://github.com/coursier/cache-action/releases
+        # v6.4.5
+        uses: coursier/cache-action@1ff273bff02a8787bc9f1877d347948af647956d
 
       - name: Set up JDK 11
-        uses: coursier/[email protected]
+        # https://github.com/coursier/setup-action/releases
+        # v1.3.5
+        uses: coursier/setup-action@7bde40eee928896f074dbb76d22dd772eed5c65f
         with:
           jvm: temurin:1.11.0
 

.github/workflows/integration-tests-kube-dns.yml

@@ -17,11 +17,11 @@ jobs:
    integration-test:
     name: Integration Tests for Kubernetes DNS
     runs-on: ubuntu-22.04
-    strategy:
-      fail-fast: false    
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        # https://github.com/actions/checkout/releases
+        # v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
@@ -32,10 +32,14 @@ jobs:
           git checkout scratch
 
       - name: Cache Coursier cache
-        uses: coursier/[email protected]
+        # https://github.com/coursier/cache-action/releases
+        # v6.4.5
+        uses: coursier/cache-action@1ff273bff02a8787bc9f1877d347948af647956d
 
       - name: Set up JDK 11
-        uses: coursier/[email protected]
+        # https://github.com/coursier/setup-action/releases
+        # v1.3.5
+        uses: coursier/setup-action@7bde40eee928896f074dbb76d22dd772eed5c65f
         with:
           jvm: temurin:1.11.0
 

.github/workflows/integration-tests-lease.yml

@@ -17,11 +17,11 @@ jobs:
    integration-test:
     name: Integration test for Kubernetes Lease
     runs-on: ubuntu-22.04
-    strategy:
-      fail-fast: false    
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        # https://github.com/actions/checkout/releases
+        # v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
@@ -32,15 +32,21 @@ jobs:
           git checkout scratch
 
       - name: Cache Coursier cache
-        uses: coursier/[email protected]
+        # https://github.com/coursier/cache-action/releases
+        # v6.4.5
+        uses: coursier/cache-action@1ff273bff02a8787bc9f1877d347948af647956d
 
       - name: Set up JDK 11
-        uses: coursier/[email protected]
+        # https://github.com/coursier/setup-action/releases
+        # v1.3.5
+        uses: coursier/setup-action@7bde40eee928896f074dbb76d22dd772eed5c65f
         with:
           jvm: temurin:1.11.0
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v5
+        # https://github.com/coursier/cache-action/releases
+        # v6.4.5
+        uses: coursier/cache-action@1ff273bff02a8787bc9f1877d347948af647956d
 
       - name: Setup Minikube
         # https://github.com/manusa/actions-setup-minikube/releases

.github/workflows/integration-tests-maven.yml

@@ -16,11 +16,11 @@ jobs:
    integration-test:
     name: Integration Tests for Kubernetes API with Maven
     runs-on: ubuntu-22.04
-    strategy:
-      fail-fast: false    
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        # https://github.com/actions/checkout/releases
+        # v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
@@ -31,10 +31,14 @@ jobs:
           git checkout scratch
 
       - name: Cache Coursier cache
-        uses: coursier/[email protected]
+        # https://github.com/coursier/cache-action/releases
+        # v6.4.5
+        uses: coursier/cache-action@1ff273bff02a8787bc9f1877d347948af647956d
 
       - name: Set up JDK 11
-        uses: coursier/[email protected]
+        # https://github.com/coursier/setup-action/releases
+        # v1.3.5
+        uses: coursier/setup-action@7bde40eee928896f074dbb76d22dd772eed5c65f
         with:
           jvm: temurin:1.11.0
 

.github/workflows/integration-tests-rolling-update-cr.yml

@@ -18,11 +18,11 @@ jobs:
    integration-test:
     name: Integration Tests for Rolling Update CR Kubernetes
     runs-on: ubuntu-22.04
-    strategy:
-      fail-fast: false    
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        # https://github.com/actions/checkout/releases
+        # v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
@@ -33,10 +33,14 @@ jobs:
           git checkout scratch
 
       - name: Cache Coursier cache
-        uses: coursier/[email protected]
+        # https://github.com/coursier/cache-action/releases
+        # v6.4.5
+        uses: coursier/cache-action@1ff273bff02a8787bc9f1877d347948af647956d
 
       - name: Set up JDK 11
-        uses: coursier/[email protected]
+        # https://github.com/coursier/setup-action/releases
+        # v1.3.5
+        uses: coursier/setup-action@7bde40eee928896f074dbb76d22dd772eed5c65f
         with:
           jvm: temurin:1.11.0
 

.github/workflows/integration-tests-rolling-update.yml

@@ -18,11 +18,11 @@ jobs:
    integration-test:
     name: Integration Tests for Rolling Update Kubernetes
     runs-on: ubuntu-22.04
-    strategy:
-      fail-fast: false    
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        # https://github.com/actions/checkout/releases
+        # v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
@@ -33,10 +33,14 @@ jobs:
           git checkout scratch
 
       - name: Cache Coursier cache
-        uses: coursier/[email protected]
+        # https://github.com/coursier/cache-action/releases
+        # v6.4.5
+        uses: coursier/cache-action@1ff273bff02a8787bc9f1877d347948af647956d
 
       - name: Set up JDK 11
-        uses: coursier/[email protected]
+        # https://github.com/coursier/setup-action/releases
+        # v1.3.5
+        uses: coursier/setup-action@7bde40eee928896f074dbb76d22dd772eed5c65f
         with:
           jvm: temurin:1.11.0
 

.github/workflows/native-image-tests.yml

@@ -14,7 +14,9 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        # https://github.com/actions/checkout/releases
+        # v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
@@ -26,11 +28,13 @@ jobs:
 
       - name: Cache Coursier cache
         # https://github.com/coursier/cache-action/releases
-        uses: coursier/[email protected]
+        # v6.4.5
+        uses: coursier/cache-action@1ff273bff02a8787bc9f1877d347948af647956d
 
       - name: Set up JDK 11
         # https://github.com/coursier/setup-action/releases
-        uses: coursier/[email protected]
+        # v1.3.5
+        uses: coursier/setup-action@7bde40eee928896f074dbb76d22dd772eed5c65f
         with:
           jvm: temurin:1.11
 

.github/workflows/release.yml

@@ -21,7 +21,9 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        # https://github.com/actions/checkout/releases
+        # v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           # we don't know what commit the last tag was it's safer to get entire repo so previousStableVersion resolves
           fetch-depth: 0
@@ -33,10 +35,14 @@ jobs:
           git checkout scratch
 
       - name: Cache Coursier cache
-        uses: coursier/[email protected]
+        # https://github.com/coursier/cache-action/releases
+        # v6.4.5
+        uses: coursier/cache-action@1ff273bff02a8787bc9f1877d347948af647956d
 
       - name: Set up JDK 11
-        uses: coursier/[email protected]
+        # https://github.com/coursier/setup-action/releases
+        # v1.3.5
+        uses: coursier/setup-action@7bde40eee928896f074dbb76d22dd772eed5c65f
         with:
           jvm: temurin:1.11.0.17
 
@@ -53,13 +59,17 @@ jobs:
     if: github.event.repository.fork == false
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        # https://github.com/actions/checkout/releases
+        # v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           # we don't know what commit the last tag was it's safer to get entire repo so previousStableVersion resolves
           fetch-depth: 0
 
       - name: Set up JDK 17
-        uses: coursier/[email protected]
+        # https://github.com/coursier/setup-action/releases
+        # v1.3.5
+        uses: coursier/setup-action@7bde40eee928896f074dbb76d22dd772eed5c65f
         with:
           jvm: temurin:1.17.0