Merge pull request #94 from MinimallyCorrect/renovate/pin-dependencies

Pin dependencies

Author: LunNova

.github/workflows/ci.yml

@@ -12,8 +12,8 @@ jobs:
     verify-gradle-wrapper:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v2
-            - uses: gradle/[email protected]
+            - uses: actions/checkout@7884fcad6b5d53d10323aee724dc68d8b9096a2e # tag=v2
+            - uses: gradle/wrapper-validation-action@e6e38bacfdf1a337459f332974bb2327a31aaf4b # tag=v1.0.4
 
     build:
         if: "! contains(toJSON(github.event.commits.*.message), '[skip ci]')"
@@ -22,8 +22,8 @@ jobs:
             matrix:
                 jdk: [11, 15, 16]
         steps:
-            - uses: actions/checkout@v2
-            - uses: actions/[email protected]
+            - uses: actions/checkout@7884fcad6b5d53d10323aee724dc68d8b9096a2e # tag=v2
+            - uses: actions/cache@c64c572235d810460d0d6876e9c705ad5002b353 # tag=v2.1.6
               with:
                 path: |
                     ~/.gradle/caches
@@ -32,7 +32,7 @@ jobs:
                 restore-keys: |
                     ${{ runner.os }}-jdk-${{ matrix.jdk }}-gradlewrapper-${{ hashFiles('**/gradle-wrapper.properties') }}-gradlescripts-
             - name: Set up JDK
-              uses: actions/[email protected]
+              uses: actions/setup-java@8db439b6b47e5e12312bf036760bbaa6893481ac # tag=v2.3.1
               with:
                   java-version: ${{ matrix.jdk }}
                   distribution: adopt
@@ -50,19 +50,19 @@ jobs:
 
         steps:
             - name: Check out code
-              uses: actions/checkout@v2
+              uses: actions/checkout@7884fcad6b5d53d10323aee724dc68d8b9096a2e # tag=v2
               with:
                   fetch-depth: '0' # https://github.com/shipkit/shipkit-changelog#fetch-depth-on-ci
 
-            - uses: actions/[email protected]
+            - uses: actions/cache@c64c572235d810460d0d6876e9c705ad5002b353 # tag=v2.1.6
               with:
                 path: |
                   ~/.gradle/caches
                   ~/.gradle/wrapper
                 key: releasing-${{ runner.os }}-jdk-${{ matrix.jdk }}-gradlewrapper-${{ hashFiles('**/gradle-wrapper.properties') }}-gradlescripts-${{ hashFiles('**/*.gradle*') }}
 
             - name: Set up Java 11
-              uses: actions/[email protected]
+              uses: actions/setup-java@8db439b6b47e5e12312bf036760bbaa6893481ac # tag=v2.3.1
               with:
                   java-version: 11
                   distribution: adopt