From 9dd5fbe67cd9b19725f6360a016c0ce7c6cb15b9 Mon Sep 17 00:00:00 2001
From: Jonathan Norris <jonathan@taplytics.com>
Date: Tue, 22 Jul 2025 12:01:47 -0400
Subject: [PATCH] chore: pin actions to git sha

---
 .github/workflows/checks.yml        |  6 ++---
 .github/workflows/test-examples.yml | 40 ++++++++++++++---------------
 .github/workflows/unit-test.yml     | 24 ++++++++---------
 3 files changed, 35 insertions(+), 35 deletions(-)

diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index 4b130c32..ba0369c1 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -1,4 +1,4 @@
-name: 'Semantic PR'
+name: "Semantic PR"
 on:
   pull_request_target:
     types:
@@ -12,6 +12,6 @@ jobs:
     name: Semantic PR title
     runs-on: ubuntu-latest
     steps:
-      - uses: amannn/action-semantic-pull-request@v5
+      - uses: amannn/action-semantic-pull-request@0723387faaf9b38adef4775cd42cfd5155ed6017
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
\ No newline at end of file
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/test-examples.yml b/.github/workflows/test-examples.yml
index 3779c71b..9eed1c7a 100644
--- a/.github/workflows/test-examples.yml
+++ b/.github/workflows/test-examples.yml
@@ -4,28 +4,28 @@ permissions:
 
 on:
   pull_request:
-    branches: [ main ]
+    branches: [main]
 
 jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-java@v4
-      with:
-        distribution: temurin
-        java-version: 11
-    - name: Setup Gradle
-      uses: gradle/actions/setup-gradle@v3
-    - name: Run local bucketing example
-      run: ./gradlew runLocalExample
-      env:
-        DEVCYCLE_SERVER_SDK_KEY: "${{ secrets.DEVCYCLE_SERVER_SDK_KEY }}"
-    - name: Run cloud bucketing example
-      run: ./gradlew runCloudExample
-      env:
-        DEVCYCLE_SERVER_SDK_KEY: "${{ secrets.DEVCYCLE_SERVER_SDK_KEY }}"
-    - name: Run OpenFeature example
-      run: ./gradlew runOpenFeatureExample
-      env:
-        DEVCYCLE_SERVER_SDK_KEY: "${{ secrets.DEVCYCLE_SERVER_SDK_KEY }}"
\ No newline at end of file
+      - uses: actions/checkout@v4
+      - uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: 11
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@ac638b010cf58a27ee6c972d7336334ccaf61c96
+      - name: Run local bucketing example
+        run: ./gradlew runLocalExample
+        env:
+          DEVCYCLE_SERVER_SDK_KEY: "${{ secrets.DEVCYCLE_SERVER_SDK_KEY }}"
+      - name: Run cloud bucketing example
+        run: ./gradlew runCloudExample
+        env:
+          DEVCYCLE_SERVER_SDK_KEY: "${{ secrets.DEVCYCLE_SERVER_SDK_KEY }}"
+      - name: Run OpenFeature example
+        run: ./gradlew runOpenFeatureExample
+        env:
+          DEVCYCLE_SERVER_SDK_KEY: "${{ secrets.DEVCYCLE_SERVER_SDK_KEY }}"
diff --git a/.github/workflows/unit-test.yml b/.github/workflows/unit-test.yml
index f61e4a4a..68c9c71c 100644
--- a/.github/workflows/unit-test.yml
+++ b/.github/workflows/unit-test.yml
@@ -2,7 +2,7 @@ name: Java Unit Test
 
 on:
   pull_request:
-    branches: [ main ]
+    branches: [main]
 
 permissions:
   contents: read
@@ -11,14 +11,14 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-java@v4
-      with:
-        distribution: temurin
-        java-version: 11
-    - name: Setup Gradle
-      uses: gradle/actions/setup-gradle@v3
-    - name: Run build with Gradle Wrapper
-      run: ./gradlew build
-    - name: Test with Gradle Wrapper
-      run: ./gradlew test
\ No newline at end of file
+      - uses: actions/checkout@v4
+      - uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: 11
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@ac638b010cf58a27ee6c972d7336334ccaf61c96
+      - name: Run build with Gradle Wrapper
+        run: ./gradlew build
+      - name: Test with Gradle Wrapper
+        run: ./gradlew test