chore(deps): update all dependencies

.github/workflows/ci.yml

@@ -47,9 +47,9 @@ jobs:
  env:
  RepositoryBranch: ${{github.ref}}
  steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
  - name: Setup .NET Core
- uses: actions/setup-dotnet@v4
+ uses: actions/setup-dotnet@4d6c8fcf3c8f7a60068d26b594648e99df24cee3 # v4
 
  - run: dotnet run --project src/ListDotNetTypes/ListDotNetTypes.csproj -- src/Meziantou.Analyzer/Resources/
 
@@ -69,7 +69,7 @@ jobs:
  - run: dotnet pack src/Meziantou.Analyzer.pack.csproj --configuration Release --no-build /p:Version=${{ needs.compute_package_version.outputs.package_version }}
  - run: dotnet pack src/Meziantou.Analyzer.Annotations/Meziantou.Analyzer.Annotations.csproj --configuration Release
 
- - uses: actions/upload-artifact@v4
+ - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4
  with:
  name: nuget
  if-no-files-found: error
@@ -80,10 +80,10 @@ jobs:
  runs-on: ubuntu-latest
  needs: [ create_nuget ]
  steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
  - name: Setup .NET Core (global.json)
- uses: actions/setup-dotnet@v4
- - uses: actions/download-artifact@v4
+ uses: actions/setup-dotnet@4d6c8fcf3c8f7a60068d26b594648e99df24cee3 # v4
+ - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4
  with:
  name: nuget
  path: ${{ env.NuGetDirectory }}
@@ -113,12 +113,12 @@ jobs:
  roslyn-version: [ 'roslyn3.8', 'roslyn4.2', 'roslyn4.4', 'roslyn4.6', 'roslyn4.8', 'default' ]
  fail-fast: false
  steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
  - name: Setup .NET Core (global.json)
- uses: actions/setup-dotnet@v4
+ uses: actions/setup-dotnet@4d6c8fcf3c8f7a60068d26b594648e99df24cee3 # v4
  - run: dotnet test --configuration ${{ matrix.configuration }} --logger trx --logger "GitHubActions;report-warnings=false" --collect:"XPlat Code Coverage" --blame-hang --blame-hang-timeout 2min --results-directory "${{ env.TestResultsDirectory }}" /p:WarningsAsErrors=true /p:RoslynVersion=${{ matrix.roslyn-version}}
  name: Run tests
- - uses: actions/upload-artifact@v4
+ - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4
  if: always()
  with:
  name: test-results-${{ matrix.runs-on }}-${{ matrix.roslyn-version }}-${{ matrix.configuration }}
@@ -130,15 +130,15 @@ jobs:
  runs-on: 'ubuntu-latest'
  needs: [ validate_nuget, build_and_test ]
  steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
  with:
  fetch-depth: 2
- - uses: actions/download-artifact@v4
+ - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4
  with:
  name: nuget
  path: ${{ env.NuGetDirectory }}
  - name: Setup .NET Core
- uses: actions/setup-dotnet@v4
+ uses: actions/setup-dotnet@4d6c8fcf3c8f7a60068d26b594648e99df24cee3 # v4
  - run: |
  Write-Host "Current ref: $env:GITHUB_REF"
  Write-Host "Searching nupkg in folder: ${{ env.NuGetDirectory }}"
@@ -167,7 +167,7 @@ jobs:
  permissions:
  contents: write
  steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
  - run: 'gh release create "${{ needs.compute_package_version.outputs.package_version }}" --generate-notes --notes "NuGet package: <https://www.nuget.org/packages/Meziantou.Analyzer/${{ needs.compute_package_version.outputs.package_version }}>"'
  env:
  GH_TOKEN: ${{ github.token }}

.github/workflows/close-issues.yml

@@ -11,7 +11,7 @@ jobs:
  issues: write
  pull-requests: write
  steps:
- - uses: actions/stale@v9
+ - uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9
  with:
  days-before-issue-stale: 60
  days-before-issue-close: 14

Directory.Build.props

@@ -34,7 +34,7 @@
  </ItemGroup>
 
  <ItemGroup>
- <PackageReference Include="Meziantou.DotNet.CodingStandard" Version="1.0.123">
+ <PackageReference Include="Meziantou.DotNet.CodingStandard" Version="1.0.125">
  <PrivateAssets>all</PrivateAssets>
  <IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets>
  </PackageReference>