Sedat Qaja 2a79103060 ci(release): pin the actions and keep inputs out of the shell ...

zizmor flags the HealthChat release workflow now that the rebase PR shows
the whole file as new: five actions referenced by floating major tags, the
workflow_dispatch version input expanded straight into a shell script, and
a Gradle cache on a release build.

- Pin checkout, setup-java, setup-gradle, upload-artifact and
  upload-google-play to commit SHAs with their version in a comment, the
  way every upstream workflow does.
- Pass the version input through the environment instead of expanding it
  into the run script.
- Disable the Gradle cache for the release build so a poisoned cache from
  another workflow cannot reach the signed bundle.

2026-10-19 16:42:35 +02:00

..

scripts

Stop rewriting screenshots that did not meaningfully change

2026-10-01 15:46:28 +02:00

build_enterprise.yml

ci: run the fork's pipelines on the self-hosted runners

2026-10-19 08:47:32 +02:00

build.yml

ci: run the fork's pipelines on the self-hosted runners

2026-10-19 08:47:32 +02:00

fork-pr-notice.yml

Update actions/github-script action to v9

2026-04-17 00:03:24 +00:00

generate_github_pages.yml

Update gradle/actions action to v6.4.0

2026-10-06 06:37:04 +00:00

gradle-wrapper-update.yml

Update actions/setup-java action to v6.0.1

2026-09-17 12:54:12 +00:00

healthchat-release-playstore.yml

ci(release): pin the actions and keep inputs out of the shell

2026-10-19 16:42:35 +02:00

maestro-local.yml

ci: run the fork's pipelines on the self-hosted runners

2026-10-19 08:47:32 +02:00

nightly.yml

Update actions/setup-java action to v6.0.1

2026-09-17 12:54:12 +00:00

nightlyReports.yml

Let Gradle continue after a task failure in CI checks

2026-10-14 14:46:05 +02:00

post-release.yml

Update actions/github-script action to v9

2026-04-17 00:03:24 +00:00

pr-checks.yml

Adapt HealthChat to upstream v26.10.0

2026-10-19 09:05:35 +02:00

pull_request.yml

ci: run the fork's pipelines on the self-hosted runners

2026-10-19 08:47:32 +02:00

quality.yml

ci: run the fork's pipelines on the self-hosted runners

2026-10-19 08:47:32 +02:00

recordScreenshots.yml

ci: let the screenshot recorder pull LFS on the private fork

2026-10-19 16:34:45 +02:00

release.yml

Update actions/upload-artifact action to v7.0.2 (#7921)

2026-10-14 12:25:19 +00:00

sonar.yml

ci: run the fork's pipelines on the self-hosted runners

2026-10-19 08:47:32 +02:00

stale-issues.yml

Update actions/stale action to v11

2026-08-04 20:49:57 +00:00

sync-enterprise-submodule.yml

Do not list enterprise commit messages in the submodule update PR

2026-10-09 10:33:22 +02:00

sync-localazy.yml

Update gradle/actions action to v6.4.0

2026-10-06 06:37:04 +00:00

sync-sas-strings.yml

Update actions/checkout action to v7.0.1

2026-07-27 16:18:01 +00:00

tests.yml

Adapt HealthChat to upstream v26.10.0

2026-10-19 09:05:35 +02:00

triage-incoming.yml

Update actions/add-to-project action to v2 (#6758)

2026-05-11 14:13:23 +02:00

triage-labelled.yml

Update actions/add-to-project action to v2 (#6758)

2026-05-11 14:13:23 +02:00

validate-lfs.yml

ci: run the fork's pipelines on the self-hosted runners

2026-10-19 08:47:32 +02:00