From bd51849990e2ed32ff14ecd3f059e92576cfe54b Mon Sep 17 00:00:00 2001
From: "go-git-renovate[bot]"
 <245267575+go-git-renovate[bot]@users.noreply.github.com>
Date: Fri, 24 Jul 2026 09:33:35 +0000
Subject: [PATCH] build: Update github-actions

Signed-off-by: go-git-renovate[bot] <245267575+go-git-renovate[bot]@users.noreply.github.com>
---
 .github/workflows/renovate-config-validate.yml | 2 +-
 .github/workflows/renovate.yml                 | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/renovate-config-validate.yml b/.github/workflows/renovate-config-validate.yml
index 2157007..c5df801 100644
--- a/.github/workflows/renovate-config-validate.yml
+++ b/.github/workflows/renovate-config-validate.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5.0.0
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
 
       - name: Run validation
         run: make validate
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index d0ccb87..49993a1 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -13,7 +13,7 @@ jobs:
     steps:
       - name: Get token
         id: get_token
-        uses: actions/create-github-app-token@v2.1.4
+        uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2.2.2
         with:
           private-key: ${{ secrets.RENOVATE_PRIVATE_KEY }}
           app-id: ${{ secrets.RENOVATE_APP_ID }}
@@ -28,10 +28,10 @@ jobs:
             gcfg
 
       - name: Checkout
-        uses: actions/checkout@v5.0.0
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
 
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v44.0.1
+        uses: renovatebot/github-action@eaf12548c13069dcc28bb75c4ee4610cdbe400c5 # v44.2.6
         with:
           configurationFile: default.json
           token: '${{ steps.get_token.outputs.token }}'