Pin the latest gradle-build-action (#3045)

.github/workflows/build-common.yml

@@ -20,7 +20,7 @@ jobs:
           java-version: 17
 
       - name: Spotless
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@v2.4.2
         with:
           arguments: spotlessCheck ${{ inputs.no-build-cache && '--no-build-cache' || '' }}
 
@@ -43,7 +43,7 @@ jobs:
           java-version: 11
 
       - name: Generate license report
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@v2.4.2
         with:
           # ignore inputs.no-build-cache and always run with --no-build-cache
           # see https://github.com/jk1/Gradle-License-Report/issues/231
@@ -82,7 +82,7 @@ jobs:
           java-version: 11
 
       - name: Assemble
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@v2.4.2
         with:
           # javadoc task fails sporadically fetching https://docs.oracle.com/javase/8/docs/api/
           arguments: assemble -Dai.etw.native.build=release -x javadoc ${{ inputs.no-build-cache && '--no-build-cache' || '' }}
@@ -130,7 +130,7 @@ jobs:
           java-version: 11
 
       - name: Test
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@v2.4.2
         with:
           # spotless is checked separately since it's a common source of failure
           arguments: >
@@ -170,6 +170,6 @@ jobs:
           java-version: 11
 
       - name: Test
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@v2.4.2
         with:
           arguments: ${{ matrix.module }}:smokeTest

.github/workflows/codeql-daily.yml

@@ -23,7 +23,7 @@ jobs:
         with:
           languages: java
 
-      - uses: gradle/gradle-build-action@v2
+      - uses: gradle/gradle-build-action@v2.4.2
         with:
           # skipping build cache is needed so that all modules will be analyzed
           arguments: assemble --no-build-cache

.github/workflows/comment-driven-automation.yml

@@ -42,7 +42,7 @@ jobs:
           env.COMMAND == 'spotless' ||
           env.COMMAND == 'license' ||
           env.COMMAND == 'lockfile'
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@v2.4.2
         with:
           cache-read-only: true
 

.github/workflows/owasp-dependency-check-daily.yml

@@ -20,7 +20,7 @@ jobs:
           distribution: temurin
           java-version: 11
 
-      - uses: gradle/gradle-build-action@v2
+      - uses: gradle/gradle-build-action@v2.4.2
         with:
           arguments: ":agent:agent:dependencyCheckAnalyze"
 

.github/workflows/pull-request-helper.yml

@@ -21,7 +21,7 @@ jobs:
           gh pr checkout $NUMBER
 
       - name: Set up Gradle cache
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@v2.4.2
         with:
           cache-read-only: true