From eeab71adc5c79ff095258226119a8f9d70307ae4 Mon Sep 17 00:00:00 2001
From: "groq-renovate[bot]"
 <202003807+groq-renovate[bot]@users.noreply.github.com>
Date: Mon, 29 Jun 2026 19:44:04 +0000
Subject: [PATCH] chore(deps): pin dependencies

---
 .github/workflows/code-freeze-bypass.yaml | 2 +-
 .github/workflows/lint-test.yml           | 6 +++---
 .github/workflows/release-please.yml      | 8 ++++----
 .github/workflows/stale.yaml              | 2 +-
 4 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/code-freeze-bypass.yaml b/.github/workflows/code-freeze-bypass.yaml
index bfa26d5a..b1ffb077 100644
--- a/.github/workflows/code-freeze-bypass.yaml
+++ b/.github/workflows/code-freeze-bypass.yaml
@@ -22,7 +22,7 @@ jobs:
       BYPASS_LABEL: bypass-code-freeze
     steps:
       - name: Emit bypass status
-        uses: actions/github-script@v8
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/lint-test.yml b/.github/workflows/lint-test.yml
index 24993609..954ae937 100644
--- a/.github/workflows/lint-test.yml
+++ b/.github/workflows/lint-test.yml
@@ -15,13 +15,13 @@ jobs:
         os: [ubuntu-latest, macos-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v6
-      - uses: cashapp/activate-hermit@v1
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: cashapp/activate-hermit@cea9af7913204a965fd488637a8d1811bba2e616 # v1
         with:
           cache: "true"
       - name: Build
         run: go build ./...
-      - uses: golangci/golangci-lint-action@v9
+      - uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9
         with:
           install-mode: "none"
       - name: Test
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 76c54ed9..0f934eb4 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -13,24 +13,24 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - uses: googleapis/release-please-action@v4
+      - uses: googleapis/release-please-action@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 # v4
         id: release
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
       # Create packages on release creation
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           fetch-depth: 0
           ref: ${{ steps.release.outputs.tag_name }}
         if: ${{ steps.release.outputs.release_created }}
 
-      - uses: cashapp/activate-hermit@v1
+      - uses: cashapp/activate-hermit@cea9af7913204a965fd488637a8d1811bba2e616 # v1
         with:
           cache: "true"
         if: ${{ steps.release.outputs.release_created }}
 
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6
         with:
           distribution: goreleaser
           version: "~> v2"
diff --git a/.github/workflows/stale.yaml b/.github/workflows/stale.yaml
index 4094ef24..43de7129 100644
--- a/.github/workflows/stale.yaml
+++ b/.github/workflows/stale.yaml
@@ -17,7 +17,7 @@ jobs:
       pull-requests: write
       issues: write
     steps:
-      - uses: actions/stale@v10
+      - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10
         with:
           stale-pr-message: "This PR is stale because it has been open for 30 days with no activity. Remove stale label or comment or this will be closed in 7 days."
           close-pr-message: "This PR was closed because it has been stalled for 7 days with no activity."