)]}'
{
  "commit": "ffd8a67017bc0ed362e3f7dbb96ed94531fd3f3a",
  "tree": "2debc9866ff68fd1e8a14aa97581b676f54a44c9",
  "parents": [
    "f76fda5584aa368b43f1f89053fda3c7af8cd69f"
  ],
  "author": {
    "name": "James Fredley",
    "email": "jamesfredley@users.noreply.github.com",
    "time": "Fri May 29 13:10:08 2026 -0400"
  },
  "committer": {
    "name": "James Fredley",
    "email": "jamesfredley@users.noreply.github.com",
    "time": "Fri May 29 13:10:08 2026 -0400"
  },
  "message": "ci: audit and update GitHub Actions to ASF-approved versions\n\nPin every external GitHub Action to a full commit SHA from the ASF\napproved actions allow-list, with a trailing comment naming the version\nit resolves to. Mirrors the grails-core audit in apache/grails-core#15690.\n\n- actions/checkout -\u003e de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 (was v4, v6)\n- actions/setup-java -\u003e be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0 (was v4, v5)\n- gradle/actions/setup-gradle -\u003e 50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0 (was 017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2, 0723195856401067f7a2779048b490ace7a47d7c # v5.0.2)\n- scacap/action-surefire-report -\u003e 3dacff26879cd2a7f2160d101254032a3707fe6f # v1.12.0 (was 5609ce4db72c09db044803b344a8968fd1f315da # v1.9.1)\n- actions/cache -\u003e 27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 (was v5)\n\nAdd cache-provider: basic to all 3 setup-gradle steps so caching\nstays on the MIT-licensed provider rather than the proprietary enhanced\nprovider introduced in gradle/actions v6 (Gradle commercial Terms of Use).\n\nFirst-party apache/grails-github-actions/* and local ./.github/actions/*\nreferences are intentionally left unchanged.\n\nAssisted-by: claude-code:claude-4.8-opus\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "6c8e25f73e49721406023a1bdf7a0764358f2d7b",
      "old_mode": 33188,
      "old_path": ".github/workflows/gradle.yml",
      "new_id": "266e1b20e500eef8ac9921de0168cc5292658f0d",
      "new_mode": 33188,
      "new_path": ".github/workflows/gradle.yml"
    },
    {
      "type": "modify",
      "old_id": "074c8b66caee7ce561b598bb12361f0519e6d5a3",
      "old_mode": 33188,
      "old_path": ".github/workflows/publish.yml",
      "new_id": "e981f778bc64f8950b62d79bbdff7593e896196f",
      "new_mode": 33188,
      "new_path": ".github/workflows/publish.yml"
    },
    {
      "type": "modify",
      "old_id": "93475b44f773281b894b4cf1c93a6d5aaea1b0b5",
      "old_mode": 33188,
      "old_path": ".github/workflows/release-companion.yml",
      "new_id": "fac5c4926a61f853a79e225d5b2131fb0630befb",
      "new_mode": 33188,
      "new_path": ".github/workflows/release-companion.yml"
    },
    {
      "type": "modify",
      "old_id": "0bb6c48274d95dbe2dfa96cb564f21047719dd5a",
      "old_mode": 33188,
      "old_path": ".github/workflows/release.yml",
      "new_id": "9ee03af5a68b843397ba5a4c970241b9b4eb517e",
      "new_mode": 33188,
      "new_path": ".github/workflows/release.yml"
    },
    {
      "type": "modify",
      "old_id": "367b6c388268fd6600d3a20b09f8c5b7349b09dc",
      "old_mode": 33188,
      "old_path": ".github/workflows/rendersite.yml",
      "new_id": "d995f0eeb4408a45f5fa2084e5483ea4de8bace1",
      "new_mode": 33188,
      "new_path": ".github/workflows/rendersite.yml"
    }
  ]
}