From 3f2e774e37649be17b4fa9e2e00312d28989448f Mon Sep 17 00:00:00 2001
From: Arata Nakafushiki <274594+raydive@users.noreply.github.com>
Date: Tue, 29 Sep 2026 09:39:08 +0900
Subject: [PATCH] [chore]pin GitHub Actions to commit SHAs and migrate to Node
 24

actions/checkout v4, actions/setup-java v4 and dorny/test-reporter v2
still target Node.js 20, which GitHub removed from hosted runners, so
every run emitted deprecation warnings. Move each action to its Node 24
line and pin every reference to a commit SHA instead of a floating tag
or branch (aws-actions/configure-aws-credentials was tracking @main).

- actions/checkout: v4 -> fbc6f39 (v5.1.0)
- actions/setup-java: v4 -> b6effb0 (v5.7.0)
- dorny/test-reporter: v2 -> a43b3a5 (v3.0.0)
- aws-actions/configure-aws-credentials: main -> e125382 (v6.3.0)

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
---
 .github/workflows/build.yaml        | 6 +++---
 .github/workflows/deploy.yaml       | 6 +++---
 .github/workflows/sync-upstream.yml | 2 +-
 3 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 01d90e1b91..a8cdf516e6 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -22,10 +22,10 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0
 
       - name: Set up JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: '11'
           distribution: 'temurin'
@@ -38,7 +38,7 @@ jobs:
             --fail-at-end
 
       - name: Report test results
-        uses: dorny/test-reporter@v2
+        uses: dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2 # v3.0.0
         if: always()
         with:
           name: Maven Tests
diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 14232affec..331c9ed386 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -19,10 +19,10 @@ jobs:
       VERSION_TAG: nu-${{ inputs.version }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0
 
       - name: Set up JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: '11'
           distribution: 'temurin'
@@ -46,7 +46,7 @@ jobs:
           git push origin "${{ env.VERSION_TAG }}"
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@main
+        uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6.3.0
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
           aws-region: ${{ secrets.AWS_REGION }}
diff --git a/.github/workflows/sync-upstream.yml b/.github/workflows/sync-upstream.yml
index 154536ddf8..898525b50e 100644
--- a/.github/workflows/sync-upstream.yml
+++ b/.github/workflows/sync-upstream.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0
         with:
           fetch-depth: 0
           ref: upstream/master