From 0f35292cdad719748c564c1364b5ab03e497f648 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 2 Oct 2026 12:48:41 +0000
Subject: [PATCH] chore(deps): update github actions

---
 .github/workflows/deploy-docu.yaml           | 4 ++--
 .github/workflows/reusable.python-black.yaml | 4 ++--
 .github/workflows/semantic-release.yaml      | 6 +++---
 .github/workflows/test-build-push.be.yaml    | 6 +++---
 .github/workflows/test-build-push.fe.yaml    | 6 +++---
 5 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/deploy-docu.yaml b/.github/workflows/deploy-docu.yaml
index c90ea5dd..9b5fc24a 100644
--- a/.github/workflows/deploy-docu.yaml
+++ b/.github/workflows/deploy-docu.yaml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0
 
       - name: Build
         run: |
@@ -21,7 +21,7 @@ jobs:
           npx honkit build . docs
 
       - name: Deploy
-        uses: crazy-max/ghaction-github-pages@v3
+        uses: crazy-max/ghaction-github-pages@5859b4ea7efe6b470a5b19c570460eae9323aefc # v3.2.0
         with:
           target_branch: gh-pages
           keep_history: true
diff --git a/.github/workflows/reusable.python-black.yaml b/.github/workflows/reusable.python-black.yaml
index bad4e0a4..0a12cbc2 100644
--- a/.github/workflows/reusable.python-black.yaml
+++ b/.github/workflows/reusable.python-black.yaml
@@ -18,10 +18,10 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0
 
       - name: Set up Python 3.10
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4.9.1
         with:
           python-version: "3.10"
 
diff --git a/.github/workflows/semantic-release.yaml b/.github/workflows/semantic-release.yaml
index e30ea681..e379b917 100644
--- a/.github/workflows/semantic-release.yaml
+++ b/.github/workflows/semantic-release.yaml
@@ -17,18 +17,18 @@ jobs:
 
         steps:
             - name: Checkout
-              uses: actions/checkout@v4
+              uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
               with:
                   ssh-key: ${{ secrets.SEMANTIC_RELEASE_BOT }}
                   fetch-depth: 0
 
             - name: Set up Node
-              uses: actions/setup-node@v4
+              uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
               with:
                   node-version: 20
 
             - name: Set up Python
-              uses: actions/setup-python@v5
+              uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
               with:
                   python-version: "3.11"
 
diff --git a/.github/workflows/test-build-push.be.yaml b/.github/workflows/test-build-push.be.yaml
index 37684bbd..5fd47b4f 100644
--- a/.github/workflows/test-build-push.be.yaml
+++ b/.github/workflows/test-build-push.be.yaml
@@ -28,10 +28,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0
 
       - name: Login to GHCR
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2.2.0
         if: github.event_name != 'pull_request' 
         with:
           registry: ${{ env.CONTAINER_REGISTRY }}
@@ -49,7 +49,7 @@ jobs:
           echo "tags=$tags,$prefix:latest" >> $GITHUB_OUTPUT
 
       - name: Build
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@1104d471370f9806843c095c1db02b5a90c5f8b6 # v3.3.1
         with:
           context: ${{ env.CONTEXT }}/.
           target: production
diff --git a/.github/workflows/test-build-push.fe.yaml b/.github/workflows/test-build-push.fe.yaml
index 98c7a533..120c9d11 100644
--- a/.github/workflows/test-build-push.fe.yaml
+++ b/.github/workflows/test-build-push.fe.yaml
@@ -25,10 +25,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0
 
       - name: Login to GHCR
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2.2.0
         if: github.event_name != 'pull_request'
         with:
           registry: ${{ env.CONTAINER_REGISTRY }}
@@ -46,7 +46,7 @@ jobs:
           echo "tags=$tags,$prefix:latest" >> $GITHUB_OUTPUT
 
       - name: Build
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@1104d471370f9806843c095c1db02b5a90c5f8b6 # v3.3.1
         with:
           context: ${{ env.CONTEXT }}/.
           target: production