From 7e297215e17c863651d486beb79d4e545a80a5f5 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 20 Jul 2026 19:56:01 +0000
Subject: [PATCH] ci(github-action): pin dependencies

---
 .github/workflows/charts-publish-oci.yaml    | 6 +++---
 .github/workflows/publish-image-init.yaml    | 4 ++--
 .github/workflows/publish-image-webhook.yaml | 4 ++--
 .github/workflows/release.yaml               | 4 ++--
 4 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/charts-publish-oci.yaml b/.github/workflows/charts-publish-oci.yaml
index 2c19779..521c3a1 100644
--- a/.github/workflows/charts-publish-oci.yaml
+++ b/.github/workflows/charts-publish-oci.yaml
@@ -15,19 +15,19 @@
         packages: write
       runs-on: ubuntu-22.04
       steps:
-        - uses: actions/checkout@v4
+        - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
           with:
             fetch-depth: 0
 
         - name: Login to GitHub Container Registry
-          uses: docker/login-action@v3
+          uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
           with:
             registry: ghcr.io
             username: ${{ github.actor }}
             password: ${{ secrets.GITHUB_TOKEN }}
 
         - name: Install Helm
-          uses: azure/setup-helm@v4
+          uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
 
         - name: Package & Push Helm Charts
           shell: bash
diff --git a/.github/workflows/publish-image-init.yaml b/.github/workflows/publish-image-init.yaml
index cb9d058..30bd3a0 100644
--- a/.github/workflows/publish-image-init.yaml
+++ b/.github/workflows/publish-image-init.yaml
@@ -39,13 +39,13 @@
 
       steps:
         - name: Checkout repository
-          uses: actions/checkout@v4
+          uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
           with:
             fetch-depth: 0
 
         - name: Docker meta
           id: meta
-          uses: docker/metadata-action@v5
+          uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
           with:
             images: ghcr.io/${{ github.repository }}/init
             tags: |
diff --git a/.github/workflows/publish-image-webhook.yaml b/.github/workflows/publish-image-webhook.yaml
index 79cd287..2f1d7f4 100644
--- a/.github/workflows/publish-image-webhook.yaml
+++ b/.github/workflows/publish-image-webhook.yaml
@@ -38,13 +38,13 @@
 
       steps:
         - name: Checkout repository
-          uses: actions/checkout@v4
+          uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
           with:
             fetch-depth: 0
 
         - name: Docker meta
           id: meta
-          uses: docker/metadata-action@v5
+          uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
           with:
             images: ghcr.io/${{ github.repository }}/webhook
             tags: |
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 62ffbd9..e7b332e 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -17,14 +17,14 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: release
-        uses: googleapis/release-please-action@v4
+        uses: googleapis/release-please-action@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 # v4
         id: release
         with:
           config-file: .github/release-please-config.json
           manifest-file: .github/.release-please-manifest.json
 
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
         if: ${{ steps.release.outputs.release_created }} || ${{ steps.release.outputs.releases_created }}
         with:
           fetch-depth: 0