From 5cad1457ecf5d79c02a8ba2e03e86a65634a8633 Mon Sep 17 00:00:00 2001
From: "gh-gardener[bot]" <173049181+gh-gardener[bot]@users.noreply.github.com>
Date: Tue, 2 Jul 2024 04:12:40 +0000
Subject: [PATCH] chore(deps): pin dependencies

---
 .github/workflows/release-please.yml | 2 +-
 .github/workflows/renovate-bot.yml   | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index a1a4644..b3227b2 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -13,6 +13,6 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - uses: googleapis/release-please-action@v4
+      - uses: googleapis/release-please-action@7987652d64b4581673a76e33ad5e98e3dd56832f # v4
         with:
           release-type: simple
diff --git a/.github/workflows/renovate-bot.yml b/.github/workflows/renovate-bot.yml
index 5335c9c..d0d1cd6 100644
--- a/.github/workflows/renovate-bot.yml
+++ b/.github/workflows/renovate-bot.yml
@@ -36,13 +36,13 @@ jobs:
     steps:
       - name: Generate a token
         id: generate-token
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@31c86eb3b33c9b601a1f60f98dcbfd1d70f379b4 # v1
         with:
           app-id: ${{ secrets.GH_GARDENER_APP_ID }}
           private-key: ${{ secrets.GH_GARDENER_PRIVATE_KEY }}
 
       - name: Checkout
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Validate Renovate JSON
         run: jq type .github/renovate.json
@@ -55,7 +55,7 @@ jobs:
           RENOVATE_ONBOARDING: "false"
           RENOVATE_PLATFORM_COMMIT: 'true'
           RENOVATE_REPOSITORIES: ${{ github.repository }}
-        uses: renovatebot/github-action@v40.1.12
+        uses: renovatebot/github-action@21d88b0bf0183abcee15f990011cca090dfc47dd # v40.1.12
         with:
           configurationFile: .github/renovate.json
           token: '${{ steps.generate-token.outputs.token }}'