Review GH action verions (#2827)

Co-authored-by: Rishab Prasad <61964599+riprasad@users.noreply.github.com>

Author: andreaTP

.github/workflows/integration-tests.yaml

@@ -24,13 +24,13 @@ concurrency:
 jobs:
   integration-tests:
     name: Integration Tests
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     if: github.repository_owner == 'Apicurio' && !contains(github.event.*.labels.*.name, 'DO NOT MERGE')
     steps:
       - name: Show Actor
         run: echo ${{github.actor}}
       - name: Checkout Code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
       - name: Set up JDK 11
         uses: actions/setup-java@v3
         with:

.github/workflows/kubernetes-tests-manual.yaml

@@ -15,11 +15,11 @@ on:
 jobs:
   kubernetes-tests:
     name: Kubernetes Tests
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     if: github.repository_owner == 'Apicurio'
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           ref: ${{ github.event.inputs.branch }}
 

.github/workflows/kubernetes-tests.yaml

@@ -24,11 +24,11 @@ concurrency:
 jobs:
   kubernetes-tests-basic:
     name: Kubernetes Tests Basic
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     if: github.repository_owner == 'Apicurio' && !contains(github.event.*.labels.*.name, 'DO NOT MERGE')
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - uses: actions/setup-go@v2
         with:
@@ -76,11 +76,11 @@ jobs:
 
   kubernetes-tests-clustered:
     name: Kubernetes Tests Clustered
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     if: github.repository_owner == 'Apicurio' && !contains(github.event.*.labels.*.name, 'DO NOT MERGE')
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - uses: actions/setup-go@v2
         with:

.github/workflows/lint.yaml

@@ -23,11 +23,11 @@ concurrency:
 jobs:
   lint:
     name: Lint
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     if: github.repository_owner == 'Apicurio' && !contains(github.event.*.labels.*.name, 'DO NOT MERGE')
     steps:
       - name: Checkout Code with Ref '${{ github.ref }}'
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Install tools
         run: .github/scripts/install-tools.sh

.github/workflows/maven-snapshot-release.yaml

@@ -3,10 +3,10 @@ on: workflow_dispatch
 
 jobs:
   deploy:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Set up JDK 11
         uses: actions/setup-java@v3

.github/workflows/publish-debug-image.yaml

@@ -12,7 +12,7 @@ concurrency:
 jobs:
   build-push-mem-image:
     name: Docker image from PR
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-ubuntu-20.04
     if: github.repository_owner == 'Apicurio'
     steps:
       - name: Checkout Code with Ref '${{ github.ref }}'

.github/workflows/registry-rhbq-build.yaml

@@ -26,7 +26,7 @@ on:
 jobs:
   build:
     name: Build Project
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     if: github.repository_owner == 'Apicurio'
     steps:
 

.github/workflows/release-images.yaml

@@ -21,7 +21,7 @@ env:
 jobs:
   release-images:
     if: github.repository_owner == 'Apicurio'
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     env:
       RELEASE_TYPE: release
     steps:
@@ -94,7 +94,7 @@ jobs:
 
       - name: Google Chat Notification
         if: ${{ failure() }}
-        uses: Co-qn/google-chat-notification@releases/v1
+        uses: Co-qn/google-chat-notification@b9227d9daa4638c9782a5bd16c4abb86268127a1
         with:
           name: ${{ github.job }}
           url: ${{ secrets.GOOGLE_CHAT_WEBHOOK }}

.github/workflows/release.yaml

@@ -14,7 +14,7 @@ on:
         default: 'main'
 jobs:
   release:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     if: github.repository_owner == 'Apicurio'
     env:
       IS_PRE_RELEASE: false
@@ -73,7 +73,7 @@ jobs:
           make SKIP_TESTS=true BUILD_FLAGS='-Dmaven.wagon.httpconnectionManager.maxTotal=30 -Dmaven.wagon.http.retryHandler.count=5' build-all
 
       - name: Import GPG Key
-        uses: crazy-max/ghaction-import-gpg@v1
+        uses: crazy-max/ghaction-import-gpg@f6f458f535f4ccdf100400ee0755c0e857226a66
         env:
           GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
           PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
@@ -101,7 +101,7 @@ jobs:
           echo "IS_PRE_RELEASE=true" >> $GITHUB_ENV
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@1e07f4398721186383de40550babbdf2b84acfc5
         with:
           name: ${{ github.event.inputs.release-version }}
           tag_name: ${{ github.event.inputs.release-version }}
@@ -144,7 +144,7 @@ jobs:
 
       - name: Google Chat Notification
         if: ${{ failure() }}
-        uses: Co-qn/google-chat-notification@releases/v1
+        uses: Co-qn/google-chat-notification@b9227d9daa4638c9782a5bd16c4abb86268127a1
         with:
           name: ${{ github.workflow }}
           url: ${{ secrets.GOOGLE_CHAT_WEBHOOK }}

.github/workflows/tag-registry-examples.yaml

@@ -20,7 +20,7 @@ on:
 
 jobs:
   tag-registry-examples:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     steps:
       - name: Set Versions
         run: |
@@ -53,7 +53,7 @@ jobs:
           git config --global user.email "apicurio.ci@gmail.com"
 
       - name: Checkout Apicurio Registry Tag ${{ env.RELEASE_VERSION }}
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
            ref: ${{ env.RELEASE_VERSION }}
            path: apicurio-registry
@@ -64,7 +64,7 @@ jobs:
         run: cd apicurio-registry && make build-all
 
       - name: Checkout Apicurio Registry Examples
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
            repository: Apicurio/apicurio-registry-examples
            path: apicurio-registry-examples
@@ -109,7 +109,7 @@ jobs:
 
       - name: Google Chat Notification
         if: ${{ failure() }}
-        uses: Co-qn/google-chat-notification@releases/v1
+        uses: Co-qn/google-chat-notification@b9227d9daa4638c9782a5bd16c4abb86268127a1
         with:
           name: ${{ github.workflow }}
           url: ${{ secrets.GOOGLE_CHAT_WEBHOOK }}

.github/workflows/tool-exportV1-release.yaml

@@ -9,9 +9,9 @@ on:
 
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Set up JDK 11
       uses: actions/setup-java@v3
       with:

.github/workflows/update-openapi.yaml

@@ -8,7 +8,7 @@ on:
 jobs:
   update-openapi:
     name: Update OpenAPI
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     if: github.repository_owner == 'Apicurio'
     steps:
       - name: Apicurio Registry Checkout

.github/workflows/update-website.yaml

@@ -7,7 +7,7 @@ on:
 jobs:
   update-website:
     if: github.repository_owner == 'Apicurio'
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     steps:
 
       - name: Apicurio Website Checkout
@@ -68,7 +68,7 @@ jobs:
 
       - name: Google Chat Notification
         if: ${{ failure() }}
-        uses: Co-qn/google-chat-notification@releases/v1
+        uses: Co-qn/google-chat-notification@b9227d9daa4638c9782a5bd16c4abb86268127a1
         with:
           name: ${{ github.job }}
           url: ${{ secrets.GOOGLE_CHAT_WEBHOOK }}

.github/workflows/verify.yaml

@@ -27,14 +27,14 @@ env:
 jobs:
   build-verify:
     name: Verify Build
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     if: github.repository_owner == 'Apicurio' && !contains(github.event.*.labels.*.name, 'DO NOT MERGE')
     strategy:
       matrix:
         jdk-version: [11, 17]
     steps:
       - name: Checkout Code with Ref '${{ github.ref }}'
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Set up JDK ${{ matrix.jdk-version }}
         uses: actions/setup-java@v3
@@ -91,11 +91,11 @@ jobs:
 
   build-native-images:
     name: Build native images
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     if: github.repository_owner == 'Apicurio' && !contains(github.event.*.labels.*.name, 'DO NOT MERGE')
     steps:
       - name: Checkout Code with Ref '${{ github.ref }}'
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Set up JDK 11
         uses: actions/setup-java@v3
@@ -177,14 +177,14 @@ jobs:
 
   notify-sdk:
     if: github.repository_owner == 'Apicurio' && github.event_name == 'push' && github.ref == 'refs/heads/main' && !contains(github.event.*.labels.*.name, 'DO NOT MERGE')
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     strategy:
       matrix:
         language: [go, js, python]
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
 
-      - uses: dorny/paths-filter@v2
+      - uses: dorny/paths-filter@b2feaf19c27470162a626bd6fa8438ae5b263721
         id: changes
         with:
           base: main
@@ -194,7 +194,7 @@ jobs:
 
       - name: Repository Dispatch
         if: steps.changes.outputs.openapi == 'true'
-        uses: peter-evans/repository-dispatch@v1
+        uses: peter-evans/repository-dispatch@ce5485de42c9b2622d2ed064be479e8ed65e76f4
         with:
            token: ${{ secrets.ACCESS_TOKEN }}
            repository: Apicurio/apicurio-registry-client-sdk-${{ matrix.language }}
@@ -203,11 +203,11 @@ jobs:
 
   trigger-examples-build:
     if: github.repository_owner == 'Apicurio' && github.event_name == 'push' && github.ref == 'refs/heads/main' && !contains(github.event.*.labels.*.name, 'DO NOT MERGE')
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     needs: [build-verify]
     steps:
       - name: Repository Dispatch
-        uses: peter-evans/repository-dispatch@v1
+        uses: peter-evans/repository-dispatch@ce5485de42c9b2622d2ed064be479e8ed65e76f4
         with:
            token: ${{ secrets.ACCESS_TOKEN }}
            repository: Apicurio/apicurio-registry-examples
@@ -216,12 +216,12 @@ jobs:
   # Triggers apicurio-registry-mt-ui build whenever apicurio-registry/ui changes
   trigger-mt-ui-build:
     if: github.repository_owner == 'Apicurio' && github.event_name == 'push' && github.ref == 'refs/heads/main' && !contains(github.event.*.labels.*.name, 'DO NOT MERGE')
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     needs: [build-verify]
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
 
-      - uses: dorny/paths-filter@v2
+      - uses: dorny/paths-filter@b2feaf19c27470162a626bd6fa8438ae5b263721
         id: changes
         with:
           base: main
@@ -232,7 +232,7 @@ jobs:
 
       - name: Repository Dispatch
         if: steps.changes.outputs.registry-ui == 'true'
-        uses: peter-evans/repository-dispatch@v1
+        uses: peter-evans/repository-dispatch@ce5485de42c9b2622d2ed064be479e8ed65e76f4
         with:
            token: ${{ secrets.ACCESS_TOKEN }}
            repository: Apicurio/apicurio-registry-mt-ui