From fa7f3f21a2f8fb3de1192edf1e9f92e979e094a6 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 18 Aug 2026 00:30:03 +0000
Subject: [PATCH] chore(github-actions): pin dependencies

---
 .github/workflows/build.yml | 4 ++--
 .github/workflows/lint.yml  | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 75273db..398c2df 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -40,14 +40,14 @@ jobs:
     steps:
       # Full history and tags: Nisse derives the version from git state, so a
       # shallow clone would build the wrong number rather than fail.
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v7.0.1
         with:
           persist-credentials: false
           fetch-depth: 0
           fetch-tags: true
           ref: ${{ inputs.ref || github.ref }}
       - name: Set up JDK
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.7.0
         with:
           java-version: "21"
           distribution: "temurin"
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 960b90d..c69b740 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -9,10 +9,10 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
 
       - name: Set up JDK
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.7.0
         with:
           distribution: "temurin"
           java-version: "21"