From 744f45c74310674db9db3f9e0091b1b4ffbb8f1f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 8 Jun 2026 02:11:43 +0000
Subject: [PATCH] Pin dependencies

---
 .github/workflows/github-ip-ranges.yaml |  4 ++--
 .github/workflows/publish.yaml          |  6 +++---
 .github/workflows/release.yaml          |  4 ++--
 .github/workflows/test.yaml             | 10 +++++-----
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/github-ip-ranges.yaml b/.github/workflows/github-ip-ranges.yaml
index 7ccbba4..01d4c27 100644
--- a/.github/workflows/github-ip-ranges.yaml
+++ b/.github/workflows/github-ip-ranges.yaml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.3
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
@@ -48,7 +48,7 @@ jobs:
 
       - if: steps.ip-check.outputs.NEW_IP_RANGES == 'true'
         name: Open Pull Request if IP Ranges Have Changed
-        uses: ExpediaGroup/github-helpers@v1
+        uses: ExpediaGroup/github-helpers@v1.89.0
         with:
           helper: create-pr
           title: "fix: update Github IP ranges"
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 57aa235..a1ab89b 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -11,10 +11,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.3
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.2.0
         with:
           bun-version-file: package.json
 
@@ -31,6 +31,6 @@ jobs:
         run: zip -r -qq proxy-lambda.zip build node_modules
 
       - name: Upload Release Assets
-        uses: softprops/action-gh-release@v3
+        uses: softprops/action-gh-release@v3.0.0
         with:
           files: proxy-lambda.zip
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index c50d17a..d80336e 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -10,10 +10,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.3
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.2.0
         with:
           bun-version-file: package.json
 
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 736ab15..b6d5621 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -10,10 +10,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.3
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.2.0
         with:
           bun-version-file: package.json
 
@@ -35,7 +35,7 @@ jobs:
   docs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.3
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
@@ -51,7 +51,7 @@ jobs:
     needs: docs
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.3
 
       - name: Read .terraform-version
         run: echo TF_VERSION=`cat .terraform-version` >> $GITHUB_ENV
@@ -71,7 +71,7 @@ jobs:
         uses: dflook/terraform-fmt@v2
 
       - name: Terraform Lint
-        uses: reviewdog/action-tflint@v1
+        uses: reviewdog/action-tflint@v1.25.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           fail_on_error: true