From 453f8a1fa03609899c44a9edf792913703e04ac3 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 13 Jul 2026 00:23:55 +0000
Subject: [PATCH 1/3] Initial plan


From 62ac64f5e833ce9d920f273e31cd97e6e55e6149 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 13 Jul 2026 00:24:42 +0000
Subject: [PATCH 2/3] Update ruby/setup-ruby to v1.316.0 (Node 24) in both
 workflows

---
 .github/workflows/deploy.yml | 4 ++--
 .github/workflows/test.yml   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index c1aa94312..134c2f0a8 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -35,8 +35,8 @@ jobs:
           submodules: true
 
       - name: Set up Ruby
-        # Pinned SHA kept in sync with .github/workflows/test.yml (ruby/setup-ruby).
-        uses: ruby/setup-ruby@4a9ddd6f338a97768b8006bf671dfbad383215f4
+        # Pinned SHA kept in sync with .github/workflows/test.yml (ruby/setup-ruby v1.316.0).
+        uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 # v1.316.0
         with:
           ruby-version: 3.3.4
           bundler-cache: true
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 4962ba6b0..297e4a7d5 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -19,7 +19,7 @@ jobs:
         submodules: true
 
     - name: Set up Ruby
-      uses: ruby/setup-ruby@4a9ddd6f338a97768b8006bf671dfbad383215f4
+      uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 # v1.316.0
       with:
         ruby-version: 3.3.4
         bundler-cache: true

From 4ff03b07789d17165ed24a2dbce8b9e6ba231ca8 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 13 Jul 2026 00:44:12 +0000
Subject: [PATCH 3/3] Update actions/checkout to v7.0.0 (Node 24) in both
 workflows

---
 .github/workflows/deploy.yml | 4 ++--
 .github/workflows/test.yml   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 134c2f0a8..0747724cb 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -29,8 +29,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        # Pinned SHA kept in sync with .github/workflows/test.yml (actions/checkout v4).
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        # Pinned SHA kept in sync with .github/workflows/test.yml (actions/checkout v7.0.0).
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           submodules: true
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 297e4a7d5..654509ddc 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       with:
         submodules: true