From f7c6a8fc23b6f924a0cf16c3cc972d0a816511a7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?L=C3=A1szl=C3=B3=20Csomor?= <laszlo@engflow.com>
Date: Wed, 27 May 2026 17:35:02 +0200
Subject: [PATCH] CI: pin third-party actions to commit hashes

---
 .github/workflows/renovate.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 2d839a52..e9858e82 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -9,9 +9,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3.3.0
+        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"
       - name: Renovate Update
-        uses: renovatebot/github-action@v34.146.1
+        uses: "renovatebot/github-action@57ea3203719eee5f6de53b57eb613562b34e72ae" # v34.146.1
         with:
           configurationFile: renovate.json
           token: ${{ secrets.GITHUB_TOKEN }}