From 07e99a86de27342763f395a253d4f17362aaa493 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 30 Jan 2026 17:29:14 +0000
Subject: [PATCH] chore(deps): pin dependencies

---
 .github/workflows/release.yaml | 14 +++++++-------
 .github/workflows/test.yaml    | 24 ++++++++++++------------
 Dockerfile                     |  2 +-
 3 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 3c854d5..dbc3faf 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -34,13 +34,13 @@ jobs:
 
         steps:
             - name: Check-out repository
-              uses: actions/checkout@v6
+              uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
             - name: Setup Python
-              uses: actions/setup-python@v6
+              uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
 
             - name: Install uv
-              uses: astral-sh/setup-uv@v7
+              uses: astral-sh/setup-uv@803947b9bd8e9f986429fa0c5a41c367cd732b41 # v7
 
             - name: Install Dependencies
               run: |
@@ -161,7 +161,7 @@ jobs:
                   cp config.example.yaml build/config.example.yaml
 
             - name: Upload Artifacts
-              uses: actions/upload-artifact@v6
+              uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
               with:
                   name: "${{ matrix.os }} build"
                   path: |
@@ -178,7 +178,7 @@ jobs:
 
         steps:
             - name: Create release
-              uses: softprops/action-gh-release@v2
+              uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2
               with:
                   name: Release ${{ github.ref_name }}
                   draft: false
@@ -212,7 +212,7 @@ jobs:
                   echo "ARCHIVE_LABEL=${ARCHIVE_LABEL}" >> $GITHUB_ENV
 
             - name: Download artifact
-              uses: actions/download-artifact@v6
+              uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6
               with:
                   name: "${{ matrix.os }} build"
                   path: ${{ env.ARCHIVE_NAME }}
@@ -228,6 +228,6 @@ jobs:
               run: mv ${{ env.ARCHIVE_NAME }}.zip ${{ env.ARCHIVE_LABEL }}.zip
 
             - name: Upload Release Asset
-              uses: softprops/action-gh-release@v2
+              uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2
               with:
                   files: ${{ env.ARCHIVE_LABEL }}.zip
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 079c66e..06d0aad 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -14,15 +14,15 @@ jobs:
         runs-on: ubuntu-latest
 
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
             - name: Set up Python
-              uses: actions/setup-python@v6
+              uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
               with:
                   python-version: "3.12"
 
             - name: Install uv
-              uses: astral-sh/setup-uv@v7
+              uses: astral-sh/setup-uv@803947b9bd8e9f986429fa0c5a41c367cd732b41 # v7
               with:
                   enable-cache: true
 
@@ -49,10 +49,10 @@ jobs:
                 python-version: ["3.11", "3.12", "3.13"]
 
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
             - name: Set up Python ${{ matrix.python-version }}
-              uses: actions/setup-python@v6
+              uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
               with:
                   python-version: ${{ matrix.python-version }}
 
@@ -61,13 +61,13 @@ jobs:
                   sudo locale-gen ja_JP.UTF-8
 
             - name: Install uv
-              uses: astral-sh/setup-uv@v7
+              uses: astral-sh/setup-uv@803947b9bd8e9f986429fa0c5a41c367cd732b41 # v7
               with:
                   enable-cache: true
 
             - name: Cache python modules
               id: cache-python-modules
-              uses: actions/cache@v5
+              uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5
               env:
                   cache-name: cache-python-modules
               with:
@@ -86,14 +86,14 @@ jobs:
               run: uv run pytest
 
             - name: Upload coverage to Coveralls
-              uses: coverallsapp/github-action@v2
+              uses: coverallsapp/github-action@5cbfd81b66ca5d10c19b062c04de0199c215fb6e # v2
               if: matrix.python-version == '3.12'
               with:
                   github-token: ${{ secrets.GITHUB_TOKEN }}
                   path-to-lcov: reports/coverage.lcov
 
             - name: Publish Test Results
-              uses: dorny/test-reporter@v2
+              uses: dorny/test-reporter@b082adf0eced0765477756c2a610396589b8c637 # v2
               if: success() || failure()
               with:
                   name: test results
@@ -101,14 +101,14 @@ jobs:
                   reporter: java-junit
 
             - name: Upload coverage file
-              uses: actions/upload-artifact@v6
+              uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
               if: always()
               with:
                   name: pytest-${{ matrix.python-version }}
                   path: reports
 
             - name: Upload artifact
-              uses: actions/upload-pages-artifact@v3
+              uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
               if: matrix.python-version == '3.12'
               with:
                   path: reports
@@ -123,4 +123,4 @@ jobs:
         steps:
             - name: Download test results
               id: deployment
-              uses: actions/deploy-pages@v4
+              uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
diff --git a/Dockerfile b/Dockerfile
index c4abed4..b0e50c3 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:22.04
+FROM ubuntu:22.04@sha256:c7eb020043d8fc2ae0793fb35a37bff1cf33f156d4d4b12ccc7f3ef8706c38b1
 
 # NOTE:
 # python:3.11.4-bookworm とかを使った場合，Selenium を同時に複数動かせないので，