From f837fbe3a6ab196e6c8dd1b786cbc6b3ada0f22e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 27 Mar 2026 16:40:17 +0000
Subject: [PATCH] chore(deps): Pin dependencies

---
 .github/actions/setup-java-env/action.yaml      | 4 ++--
 .github/workflows/shared-check-license.yaml     | 2 +-
 .github/workflows/shared-check-spotless.yaml    | 2 +-
 .github/workflows/shared-check-style.yaml       | 2 +-
 .github/workflows/shared-ci.yaml                | 2 +-
 .github/workflows/shared-codeql-analysis.yaml   | 6 +++---
 .github/workflows/shared-test-gradle-rc.yaml    | 2 +-
 .github/workflows/validate-renovate-config.yaml | 2 +-
 workflow-templates/check-spotless.yaml          | 2 +-
 workflow-templates/check-style.yaml             | 2 +-
 workflow-templates/ci.yaml                      | 2 +-
 workflow-templates/codeql-analysis.yaml         | 2 +-
 12 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/.github/actions/setup-java-env/action.yaml b/.github/actions/setup-java-env/action.yaml
index 0cde1e2..a611be6 100644
--- a/.github/actions/setup-java-env/action.yaml
+++ b/.github/actions/setup-java-env/action.yaml
@@ -31,7 +31,7 @@ runs:
         distribution: "temurin"
         java-version: "${{ inputs.runtime_version }}"
     - name: "gradle / validate wrapper"
-      uses: "gradle/actions/wrapper-validation@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2" # v5.0.0
+      uses: "gradle/actions/wrapper-validation@0723195856401067f7a2779048b490ace7a47d7c" # v5.0.2
     # Checks branch name to see if we're going to potentially publish this
     - name: "publishing branch"
       uses: "KyoriPowered/action-regex-match@5684ded1f3e016437483d3d74cfa93fcdf5e313b" # v5.0.0
@@ -46,6 +46,6 @@ runs:
       run: |
         exec "$GITHUB_ACTION_PATH/setup-gradle-properties.sh"
     - name: "gradle / setup environment"
-      uses: "gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2" # v5.0.0
+      uses: "gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c" # v5.0.2
       with:
         cache-read-only: "${{ steps.branch-name.outputs.match == '' || github.event_name == 'pull_request' }}"
diff --git a/.github/workflows/shared-check-license.yaml b/.github/workflows/shared-check-license.yaml
index c901c9a..373caa5 100644
--- a/.github/workflows/shared-check-license.yaml
+++ b/.github/workflows/shared-check-license.yaml
@@ -34,7 +34,7 @@ jobs:
     steps:
       - name: setup
         id: setup
-        uses: SpongePowered/.github/.github/actions/setup-java-env@master
+        uses: SpongePowered/.github/.github/actions/setup-java-env@58589e4d76f5b7d1203e02cedec5b174ffb1d0b7 # master
         with:
           runtime_version: ${{ inputs.runtime_version }}
           publishing_branch_regex: ${{ inputs.publishing_branch_regex }}
diff --git a/.github/workflows/shared-check-spotless.yaml b/.github/workflows/shared-check-spotless.yaml
index acabc5a..cb93cac 100644
--- a/.github/workflows/shared-check-spotless.yaml
+++ b/.github/workflows/shared-check-spotless.yaml
@@ -33,7 +33,7 @@ jobs:
     steps:
       - name: setup
         id: setup
-        uses: SpongePowered/.github/.github/actions/setup-java-env@master
+        uses: SpongePowered/.github/.github/actions/setup-java-env@58589e4d76f5b7d1203e02cedec5b174ffb1d0b7 # master
         with:
           runtime_version: ${{ inputs.runtime_version }}
           publishing_branch_regex: ${{ inputs.publishing_branch_regex }}
diff --git a/.github/workflows/shared-check-style.yaml b/.github/workflows/shared-check-style.yaml
index d3ee594..aeb1483 100644
--- a/.github/workflows/shared-check-style.yaml
+++ b/.github/workflows/shared-check-style.yaml
@@ -33,7 +33,7 @@ jobs:
     steps:
       - name: setup
         id: setup
-        uses: SpongePowered/.github/.github/actions/setup-java-env@master
+        uses: SpongePowered/.github/.github/actions/setup-java-env@58589e4d76f5b7d1203e02cedec5b174ffb1d0b7 # master
         with:
           runtime_version: ${{ inputs.runtime_version }}
           publishing_branch_regex: ${{ inputs.publishing_branch_regex }}
diff --git a/.github/workflows/shared-ci.yaml b/.github/workflows/shared-ci.yaml
index c85a318..dff6f3e 100644
--- a/.github/workflows/shared-ci.yaml
+++ b/.github/workflows/shared-ci.yaml
@@ -98,7 +98,7 @@ jobs:
     steps:
       - name: setup
         id: setup
-        uses: SpongePowered/.github/.github/actions/setup-java-env@master
+        uses: SpongePowered/.github/.github/actions/setup-java-env@58589e4d76f5b7d1203e02cedec5b174ffb1d0b7 # master
         with:
           runtime_version: ${{ inputs.runtime_version }}
           publishing_branch_regex: ${{ inputs.publishing_branch_regex }}
diff --git a/.github/workflows/shared-codeql-analysis.yaml b/.github/workflows/shared-codeql-analysis.yaml
index 0cd6b04..7954124 100644
--- a/.github/workflows/shared-codeql-analysis.yaml
+++ b/.github/workflows/shared-codeql-analysis.yaml
@@ -29,16 +29,16 @@ jobs:
     steps:
     - name: setup
       id: setup
-      uses: SpongePowered/.github/.github/actions/setup-java-env@master
+      uses: SpongePowered/.github/.github/actions/setup-java-env@58589e4d76f5b7d1203e02cedec5b174ffb1d0b7 # master
       with:
         runtime_version: ${{ inputs.runtime_version }}
         publishing_branch_regex: ${{ inputs.publishing_branch_regex }}
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@19b2f06db2b6f5108140aeb04014ef02b648f789 # v4
+      uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4
       with:
         languages: java
     - name: Build with Gradle
       run: ./gradlew ${{ inputs.extra_gradle_params }} assemble
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@19b2f06db2b6f5108140aeb04014ef02b648f789 # v4
+      uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4
diff --git a/.github/workflows/shared-test-gradle-rc.yaml b/.github/workflows/shared-test-gradle-rc.yaml
index a509d4b..41bf917 100644
--- a/.github/workflows/shared-test-gradle-rc.yaml
+++ b/.github/workflows/shared-test-gradle-rc.yaml
@@ -40,7 +40,7 @@ jobs:
     steps:
       - name: "setup environment"
         id: "setup"
-        uses: "SpongePowered/.github/.github/actions/setup-java-env@master"
+        uses: "SpongePowered/.github/.github/actions/setup-java-env@58589e4d76f5b7d1203e02cedec5b174ffb1d0b7" # master
         with:
           runtime_version: "${{ inputs.runtime_version }}"
           publishing_branch_regex: "__none__"
diff --git a/.github/workflows/validate-renovate-config.yaml b/.github/workflows/validate-renovate-config.yaml
index 12d3972..7481a84 100644
--- a/.github/workflows/validate-renovate-config.yaml
+++ b/.github/workflows/validate-renovate-config.yaml
@@ -15,6 +15,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-    - uses: suzuki-shunsuke/github-action-renovate-config-validator@ca480cb7ec89a9e1cd8c214ad33bda1617184027 # v2.0.0
+    - uses: suzuki-shunsuke/github-action-renovate-config-validator@ee9f69e1f683ed0d08225086482b34fc9abe9300 # v2.1.0
       with:
         config_file_path: renovate-config.json
diff --git a/workflow-templates/check-spotless.yaml b/workflow-templates/check-spotless.yaml
index 52750ae..735f5c1 100644
--- a/workflow-templates/check-spotless.yaml
+++ b/workflow-templates/check-spotless.yaml
@@ -8,5 +8,5 @@ on:
 
 jobs:
   call-check:
-    uses: SpongePowered/.github/.github/workflows/shared-check-spotless.yaml@master
+    uses: SpongePowered/.github/.github/workflows/shared-check-spotless.yaml@58589e4d76f5b7d1203e02cedec5b174ffb1d0b7 # master
     secrets: inherit
diff --git a/workflow-templates/check-style.yaml b/workflow-templates/check-style.yaml
index 10e20f0..544f2a9 100644
--- a/workflow-templates/check-style.yaml
+++ b/workflow-templates/check-style.yaml
@@ -8,5 +8,5 @@ on:
 
 jobs:
   call-check:
-    uses: SpongePowered/.github/.github/workflows/shared-check-style.yaml@master
+    uses: SpongePowered/.github/.github/workflows/shared-check-style.yaml@58589e4d76f5b7d1203e02cedec5b174ffb1d0b7 # master
     secrets: inherit
diff --git a/workflow-templates/ci.yaml b/workflow-templates/ci.yaml
index 124db84..d89b5d3 100644
--- a/workflow-templates/ci.yaml
+++ b/workflow-templates/ci.yaml
@@ -10,5 +10,5 @@ on:
 
 jobs:
   call-build:
-    uses: SpongePowered/.github/.github/workflows/shared-ci.yaml@master
+    uses: SpongePowered/.github/.github/workflows/shared-ci.yaml@58589e4d76f5b7d1203e02cedec5b174ffb1d0b7 # master
     secrets: inherit
diff --git a/workflow-templates/codeql-analysis.yaml b/workflow-templates/codeql-analysis.yaml
index 701db23..c4b0f3d 100644
--- a/workflow-templates/codeql-analysis.yaml
+++ b/workflow-templates/codeql-analysis.yaml
@@ -8,5 +8,5 @@ on:
 
 jobs:
   call-codeql:
-    uses: SpongePowered/.github/.github/workflows/shared-codeql-analysis.yaml@master
+    uses: SpongePowered/.github/.github/workflows/shared-codeql-analysis.yaml@58589e4d76f5b7d1203e02cedec5b174ffb1d0b7 # master
     secrets: inherit