From 272e04ca440f6de5911e1124a51a6789d29eff2d Mon Sep 17 00:00:00 2001
From: "dg-blackjack-bot[bot]"
 <234022014+dg-blackjack-bot[bot]@users.noreply.github.com>
Date: Sat, 16 May 2026 10:40:12 +0000
Subject: [PATCH] Pin third party actions to commit SHA

---
 .github/workflows/build-deploy.yml | 4 ++--
 .github/workflows/release.yml      | 6 +++---
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/build-deploy.yml b/.github/workflows/build-deploy.yml
index 903bdd4..19cffb6 100644
--- a/.github/workflows/build-deploy.yml
+++ b/.github/workflows/build-deploy.yml
@@ -12,9 +12,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
       - name: Setup .NET
-        uses: actions/setup-dotnet@v1
+        uses: actions/setup-dotnet@871f041373faaad213a635d9afb62905ec029bbb # v1
         with:
           dotnet-version: 6.0.x
       - name: Restore dependencies
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e6d5b2a..0bac4c7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,13 +11,13 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
       - name: Setup .NET
-        uses: actions/setup-dotnet@v1
+        uses: actions/setup-dotnet@871f041373faaad213a635d9afb62905ec029bbb # v1
         with:
           dotnet-version: 6.0.x
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
         with:
           fetch-depth: 0
       - name: Get the version