From 5f3d502f1a016ce725641188e9224ae6d6742b91 Mon Sep 17 00:00:00 2001
From: "netic-renovate[bot]"
 <207156494+netic-renovate[bot]@users.noreply.github.com>
Date: Mon, 5 Oct 2026 10:33:40 +0000
Subject: [PATCH] Pin dependencies

---
 .github/workflows/ci.yml      | 8 ++++----
 .github/workflows/release.yml | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7889396..37170e9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,12 +12,12 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7
-      - uses: actions/setup-go@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version-file: go.mod
-      - uses: extractions/setup-just@v4
-      - uses: golangci/golangci-lint-action@v9
+      - uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3 # v4
+      - uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9
         with:
           # renovate: datasource=github-releases depName=golangci/golangci-lint
           version: v2.14.0
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f86d396..a9036aa 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,23 +11,23 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           fetch-depth: 0
-      - uses: actions/setup-go@v7
+      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version-file: go.mod
       - run: go test ./...
       # A short-lived token from the release app, limited to the tap, which
       # GITHUB_TOKEN can't reach.
       - id: tap-token
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3
         with:
           client-id: ${{ vars.TAP_APP_CLIENT_ID }}
           private-key: ${{ secrets.TAP_APP_PRIVATE_KEY }}
           owner: neticdk
           repositories: netic-homebrew-tap
-      - uses: goreleaser/goreleaser-action@v7
+      - uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7
         with:
           # renovate: datasource=github-releases depName=goreleaser/goreleaser
           version: v2.18.2