Switch logging-parent refs in CI to tags

dependabot is not able to update `logging-parent` GHA workflow references that use hashes[1][2]. Switching to tags is safe, since `rel/`-prefixed tags are protected by INFRA. [1] dependabot/dependabot-core#8654 [2] dependabot/dependabot-core#6269
apache · Dec 21, 2023 · b23163a · b23163a
1 parent ea6d1a8
commit b23163a
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -37,6 +37,6 @@ jobs:
 
   build:
     if: github.actor != 'dependabot[bot]'
-    uses: apache/logging-parent/.github/workflows/build-reusable.yaml@e45457c683302242be5e8e7c3c33edf8f0e0ec0e # 10.4.0
+    uses: apache/logging-parent/.github/workflows/build-reusable.yaml@rel/10.5.0
     with:
       java-version: 21
diff --git a/.github/workflows/merge-dependabot.yaml b/.github/workflows/merge-dependabot.yaml
@@ -30,13 +30,13 @@ jobs:
 
   build:
     if: github.repository == 'apache/logging-log4j-samples' && github.event_name == 'pull_request_target' && github.actor == 'dependabot[bot]'
-    uses: apache/logging-parent/.github/workflows/build-reusable.yaml@merge-dependabot
+    uses: apache/logging-parent/.github/workflows/build-reusable.yaml@rel/10.5.0
     with:
       java-version: 21
 
   merge-dependabot:
     needs: build
-    uses: apache/logging-parent/.github/workflows/merge-dependabot-reusable.yaml@merge-dependabot
+    uses: apache/logging-parent/.github/workflows/merge-dependabot-reusable.yaml@rel/10.5.0
     permissions:
       contents: write                                         # to push changelog commits
       pull-requests: write                                    # to close the PR