From ed09f3e03d82e6ae1131341397bce2233560b627 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 9 Feb 2025 20:45:28 +0200
Subject: [PATCH] chore(deps): pin dependencies (#25)

---
 .github/workflows/dependency-review.yml |  4 ++--
 .github/workflows/test-and-build.yml    | 10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 16bb09c..3c74dda 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -18,6 +18,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout Repository"
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: "Dependency Review"
-        uses: actions/dependency-review-action@v4
+        uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4
diff --git a/.github/workflows/test-and-build.yml b/.github/workflows/test-and-build.yml
index 2862bef..c6ebdaa 100644
--- a/.github/workflows/test-and-build.yml
+++ b/.github/workflows/test-and-build.yml
@@ -17,12 +17,12 @@ jobs:
         php: ["8.2"]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
 
       - name: Setup PHP
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 # v2
         with:
           php-version: ${{ matrix.php }}
           ini-values: phar.readonly=0
@@ -51,7 +51,7 @@ jobs:
       - name: Ensure the PHAR works
         run: builds/branch-usage-checker --version
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4
         name: Upload the PHAR artifact
         with:
           name: branch-usage-checker
@@ -64,13 +64,13 @@ jobs:
       - "build-phar"
     if: github.event_name == 'release'
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
         with:
           name: branch-usage-checker
           path: builds/
 
       - name: Upload box.phar
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           files: builds/branch-usage-checker