From 7f2f0961128d7f35e59c9ff3e586ecfbdd391979 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 7 Jun 2026 02:51:49 +0000
Subject: [PATCH] chore(deps): pin dependencies

---
 .github/workflows/autofix.yml |  4 ++--
 .github/workflows/ci.yml      | 10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/autofix.yml b/.github/workflows/autofix.yml
index d3774006..4020d033 100644
--- a/.github/workflows/autofix.yml
+++ b/.github/workflows/autofix.yml
@@ -12,9 +12,9 @@ jobs:
   autofix:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       - run: corepack enable
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with:
           node-version: 22
           cache: "pnpm"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8dcda20c..e7bb5ccc 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,16 +12,16 @@ jobs:
   tests:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       - run: corepack enable
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with: { node-version: lts/*, cache: "pnpm" }
       - run: pnpm install
       - run: pnpm lint
       - run: pnpm build
       - run: pnpm test:types
       - run: pnpm vitest --coverage
-      - uses: codecov/codecov-action@v6
+      - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v6
         with: { token: "${{ secrets.CODECOV_TOKEN }}" }
   publish:
     runs-on: ubuntu-latest
@@ -29,10 +29,10 @@ jobs:
     needs: tests
     if: contains('refs/heads/main', github.ref) && github.event_name == 'push'
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with: { fetch-depth: 0 }
       - run: npm i -fg corepack && corepack enable
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with: { node-version: lts/*, cache: "pnpm" }
       - run: pnpm install
       - run: pnpm build