Merge pull request #400 from DaniFoldi/renovate/depworkflows-pin-depe…

…ndencies
DaniFoldi · Dec 31, 2023 · cce40f8 · cce40f8
2 parents 22d0391 + c14792b
commit cce40f8
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -12,7 +12,7 @@ jobs:
     steps:
     - name: Checkout repository
       timeout-minutes: 5
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
     - name: Setup pnpm
       uses: pnpm/action-setup@v2
@@ -21,7 +21,7 @@ jobs:
 
     - name: Install nodejs
       timeout-minutes: 5
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4
       with:
         node-version: 20
         cache: pnpm
@@ -55,7 +55,7 @@ jobs:
     steps:
     - name: Checkout repository
       timeout-minutes: 5
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
     - name: Setup pnpm
       uses: pnpm/action-setup@v2
@@ -64,7 +64,7 @@ jobs:
 
     - name: Install nodejs
       timeout-minutes: 5
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4
       with:
         node-version: 20
         cache: pnpm
@@ -77,7 +77,7 @@ jobs:
       timeout-minutes: 5
       run: pnpm build && pnpm -r build
 
-    - uses: JS-DevTools/npm-publish@v3
+    - uses: JS-DevTools/npm-publish@4b07b26a2f6e0a51846e1870223e545bae91c552 # v3
       timeout-minutes: 5
       with:
         access: public