From c8bbef9eb63d3587533ce54bd893f1b5c061d1e5 Mon Sep 17 00:00:00 2001
From: davidliu <242400+davidliu@users.noreply.github.com>
Date: Mon, 18 May 2026 00:42:09 +0000
Subject: [PATCH] chore(pinact): pin/update GitHub Actions

---
 .github/workflows/android.yml    | 8 ++++----
 .github/workflows/changesets.yml | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml
index d8909ffc0..7a5f953ca 100644
--- a/.github/workflows/android.yml
+++ b/.github/workflows/android.yml
@@ -39,7 +39,7 @@ jobs:
         java-version: '17'
         distribution: 'adopt'
 
-    - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+    - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
       with:
         path: |
           ~/.gradle/caches
@@ -187,7 +187,7 @@ jobs:
     # Setting up diffuse artifacts
     - name: Setup cache for base source file for diffuse
       if: github.event_name == 'push'
-      uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
       with:
         path: client-sdk-android/diffuse-source-file
         key: diffuse-${{ github.sha }}
@@ -214,7 +214,7 @@ jobs:
     outputs:
       base_aar_cache_hit: ${{ steps.diffuse_base_lookup.outputs.cache-hit }}
     steps:
-      - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+      - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         id: diffuse_base_lookup
         with:
           path: client-sdk-android/diffuse-source-file
@@ -252,7 +252,7 @@ jobs:
           distribution: 'adopt'
 
       # Diffuse checking for pull requests
-      - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+      - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         name: Download base source AAR for diffuse
         with:
           path: client-sdk-android/diffuse-source-file
diff --git a/.github/workflows/changesets.yml b/.github/workflows/changesets.yml
index 81057e4b6..e674eec01 100644
--- a/.github/workflows/changesets.yml
+++ b/.github/workflows/changesets.yml
@@ -21,7 +21,7 @@ jobs:
       - name: Checkout Repo
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: pnpm/action-setup@08c4be7e2e672a47d11bd04269e27e5f3e8529cb # v6.0.0
+      - uses: pnpm/action-setup@078e9d416474b29c0c387560859308974f7e9c53 # v6.0.1
         with:
           version: 10