From 30b10a9cf88bcdb3a46d923790a7036444d2c909 Mon Sep 17 00:00:00 2001
From: davidliu <242400+davidliu@users.noreply.github.com>
Date: Thu, 7 May 2026 15:17:30 +0000
Subject: [PATCH] chore(pinact): pin/update GitHub Actions

---
 .github/workflows/android.yml            | 10 +++++-----
 .github/workflows/changesets.yml         |  4 ++--
 .github/workflows/dependency_diff.yml    |  2 +-
 .github/workflows/pinact_update.yml      |  4 ++--
 .github/workflows/update_snapshot_pr.yml |  2 +-
 5 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml
index f1c765326..4e2a02a88 100644
--- a/.github/workflows/android.yml
+++ b/.github/workflows/android.yml
@@ -200,7 +200,7 @@ jobs:
 
     - name: Repository Dispatch
       if: github.event_name == 'push'
-      uses: peter-evans/repository-dispatch@bf47d102fdb849e755b0b0023ea3e81a44b6f570 # v2.1.2
+      uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697 # v4.0.1
       with:
         token: ${{ secrets.E2E_DISPATCH_TOKEN }}
         repository: livekit/e2e-android
@@ -214,7 +214,7 @@ jobs:
     outputs:
       base_aar_cache_hit: ${{ steps.diffuse_base_lookup.outputs.cache-hit }}
     steps:
-      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+      - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         id: diffuse_base_lookup
         with:
           path: client-sdk-android/diffuse-source-file
@@ -252,13 +252,13 @@ jobs:
           distribution: 'adopt'
 
       # Diffuse checking for pull requests
-      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+      - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         name: Download base source AAR for diffuse
         with:
           path: client-sdk-android/diffuse-source-file
           key: diffuse-${{ github.event.pull_request.base.sha }}
 
-      - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         name: Download current release AAR for diffuse
         with:
           name: livekit-android-sdk-release.aar
@@ -296,7 +296,7 @@ jobs:
           issue-number: ${{ github.event.pull_request.number }}
           token: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: diffuse-output
           path: ${{ steps.diffuse.outputs.diff-file }}
diff --git a/.github/workflows/changesets.yml b/.github/workflows/changesets.yml
index 6dd428a74..d1e16f1e6 100644
--- a/.github/workflows/changesets.yml
+++ b/.github/workflows/changesets.yml
@@ -135,7 +135,7 @@ jobs:
 
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Update snapshot
         id: update
@@ -147,7 +147,7 @@ jobs:
         run: echo $SNAPSHOT_VERSION
 
       - name: Create Update SNAPSHOT Pull Request
-        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6.1.0
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
         with:
           token: ${{ secrets.CHANGESET_GH_TOKEN }}
           branch: dl/update_snapshot_ver
diff --git a/.github/workflows/dependency_diff.yml b/.github/workflows/dependency_diff.yml
index 88021a4bb..d3b8a1708 100644
--- a/.github/workflows/dependency_diff.yml
+++ b/.github/workflows/dependency_diff.yml
@@ -25,7 +25,7 @@ jobs:
           distribution: 'adopt'
           java-version: 17
 
-      - uses: gradle/actions/setup-gradle@39e147cb9de83bb9910b8ef8bd7fff0ee20fcd6f # v6.0.1
+      - uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0
 
       - id: dependency-diff
         name: Generate dependency diff
diff --git a/.github/workflows/pinact_update.yml b/.github/workflows/pinact_update.yml
index dc694c6fa..45659e7bb 100644
--- a/.github/workflows/pinact_update.yml
+++ b/.github/workflows/pinact_update.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Install aqua (installs pinact)
         uses: aquaproj/aqua-installer@11dd79b4e498d471a9385aa9fb7f62bb5f52a73c # v4.0.4
@@ -47,7 +47,7 @@ jobs:
           echo "pinact exit code: ${exit_code}"
 
       - name: Create PR (if changes)
-        uses: peter-evans/create-pull-request@v8.1.1
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
         with:
           token: ${{ secrets.PINACT_GITHUB_TOKEN }}
           commit-message: "chore(pinact): pin/update GitHub Actions"
diff --git a/.github/workflows/update_snapshot_pr.yml b/.github/workflows/update_snapshot_pr.yml
index 3a6e6a087..413d3c053 100644
--- a/.github/workflows/update_snapshot_pr.yml
+++ b/.github/workflows/update_snapshot_pr.yml
@@ -28,7 +28,7 @@ jobs:
         run: echo $SNAPSHOT_VERSION
 
       - name: Create Update SNAPSHOT Pull Request
-        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6.1.0
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
         with:
           token: ${{ secrets.CHANGESET_GH_TOKEN }}
           branch: dl/update_snapshot_ver