From 7a1be14d4a277c29b8fbfdbc0257365dbae3271d Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 24 May 2026 11:24:35 +0000
Subject: [PATCH] deps: Pin dependencies

---
 .github/workflows/supplemental-catalog-drift.yml | 4 ++--
 .github/workflows/triage-bot.yml                 | 2 +-
 .github/workflows/weaver-roundtrip.yml           | 4 ++--
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/supplemental-catalog-drift.yml b/.github/workflows/supplemental-catalog-drift.yml
index 146681f..ab5bf34 100644
--- a/.github/workflows/supplemental-catalog-drift.yml
+++ b/.github/workflows/supplemental-catalog-drift.yml
@@ -28,9 +28,9 @@ jobs:
   drift-check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
-      - uses: actions/setup-dotnet@v4
+      - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4
         with:
           dotnet-version: '8.0.x'
 
diff --git a/.github/workflows/triage-bot.yml b/.github/workflows/triage-bot.yml
index 7bda9e6..16973b6 100644
--- a/.github/workflows/triage-bot.yml
+++ b/.github/workflows/triage-bot.yml
@@ -52,7 +52,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Triage unresolved review threads
-        uses: actions/github-script@v7
+        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
         with:
           github-token: ${{ secrets.TRIAGE_PAT }}
           script: |
diff --git a/.github/workflows/weaver-roundtrip.yml b/.github/workflows/weaver-roundtrip.yml
index eea43cd..e29817d 100644
--- a/.github/workflows/weaver-roundtrip.yml
+++ b/.github/workflows/weaver-roundtrip.yml
@@ -22,7 +22,7 @@ jobs:
   weaver-roundtrip:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Read pinned Weaver version
         id: pin
@@ -50,7 +50,7 @@ jobs:
             exit 1
           fi
 
-      - uses: actions/setup-dotnet@v4
+      - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4
         with:
           dotnet-version: '8.0.x'