From 6eb9065716b7f3559de90ff4149e817e3778a5d1 Mon Sep 17 00:00:00 2001
From: "repo-jeeves[bot]" <106431701+repo-jeeves[bot]@users.noreply.github.com>
Date: Mon, 25 Mar 2024 01:51:22 +0000
Subject: [PATCH] chore(deps): pin dependencies

---
 .github/workflows/check.yaml     | 8 ++++----
 .github/workflows/release.yaml   | 4 ++--
 .github/workflows/renovate.yaml  | 4 ++--
 .github/workflows/scheduled.yaml | 2 +-
 .github/workflows/test.yaml      | 2 +-
 5 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml
index 2fa40a4..eda03eb 100644
--- a/.github/workflows/check.yaml
+++ b/.github/workflows/check.yaml
@@ -21,7 +21,7 @@ jobs:
         run: |
           sudo apt-get -qq update && \
           sudo apt-get -qq install --no-install-recommends -y curl unzip gcc g++ git
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           submodules: false
       - name: Install stable
@@ -46,7 +46,7 @@ jobs:
         run: |
           sudo apt-get -qq update && \
           sudo apt-get -qq install --no-install-recommends -y curl unzip gcc g++ git
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           submodules: false
       - name: Install ${{ matrix.toolchain }}
@@ -55,7 +55,7 @@ jobs:
           toolchain: ${{ matrix.toolchain }}
           components: clippy
       - name: cargo clippy
-        uses: actions-rs/clippy-check@v1
+        uses: actions-rs/clippy-check@b5b5f21f4797c02da247df37026fcd0a5024aa4d # v1
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
   # doc:
@@ -84,7 +84,7 @@ jobs:
         run: |
           sudo apt-get -qq update && \
           sudo apt-get -qq install --no-install-recommends -y curl unzip gcc g++ git
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           submodules: false
       - name: Install stable
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index d6b97e3..8aedbec 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -55,10 +55,10 @@ jobs:
 
       - name: Setup Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v3.2.0
+        uses: docker/setup-buildx-action@2b51285047da1547ffb1b2203d8be4c0af6b1f20 # v3.2.0
 
       - name: Build container image
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5
         with:
           build-args: |-
             VERSION=${{ steps.vars.outputs.version }}
diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
index bc8eb49..3aaf245 100644
--- a/.github/workflows/renovate.yaml
+++ b/.github/workflows/renovate.yaml
@@ -43,14 +43,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Generate Token
-        uses: tibdex/github-app-token@v2
+        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2
         id: app-token
         with:
           app_id: ${{ secrets.BOT_APP_ID }}
           private_key: ${{ secrets.BOT_APP_PRIVATE_KEY }}
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           token: "${{ steps.app-token.outputs.token }}"
 
diff --git a/.github/workflows/scheduled.yaml b/.github/workflows/scheduled.yaml
index c7ff821..dee3617 100644
--- a/.github/workflows/scheduled.yaml
+++ b/.github/workflows/scheduled.yaml
@@ -46,7 +46,7 @@ jobs:
         run: |
           sudo apt-get -qq update && \
           sudo apt-get -qq install --no-install-recommends -y curl unzip gcc g++ git
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           submodules: false
       - name: Install beta
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 3650102..d959281 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -24,7 +24,7 @@ jobs:
         run: |
           sudo apt-get -qq update && \
           sudo apt-get -qq install --no-install-recommends -y curl unzip gcc g++ git
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           submodules: false
       - name: Install ${{ matrix.toolchain }}