From b8fb56b88b58748687b6735f7bc9f7a36ac703e7 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 13 Dec 2023 18:33:44 +0000
Subject: [PATCH] Pin dependencies

---
 .github/workflows/tag-and-release.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/tag-and-release.yml b/.github/workflows/tag-and-release.yml
index f5ab2b9..bfdbfb5 100644
--- a/.github/workflows/tag-and-release.yml
+++ b/.github/workflows/tag-and-release.yml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - name: Create release tag
         id: tag
-        uses: google-github-actions/release-please-action@v3
+        uses: google-github-actions/release-please-action@db8f2c60ee802b3748b512940dde88eabd7b7e01 # v3
         with:
           command: manifest # use configs in release-please-config.json
       - id: release-flag
@@ -38,7 +38,7 @@ jobs:
         uses: ./.github/actions/setup
 
       - name: Login to GHCR
-        uses: docker/login-action@v3
+        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3
         with:
           registry: ghcr.io
           username: dummy