From fb1614c008d1f36b058dc7910b316c5455d4ed8e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 19 Apr 2026 10:08:12 +0000
Subject: [PATCH] Pin dependencies

---
 .github/workflows/gradle.yml  | 10 +++++-----
 .github/workflows/release.yml | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/gradle.yml b/.github/workflows/gradle.yml
index 6929345..be82512 100644
--- a/.github/workflows/gradle.yml
+++ b/.github/workflows/gradle.yml
@@ -18,18 +18,18 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Set up JDK
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           java-version: "17"
           distribution: "temurin"
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5
+        uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5.0.2
       - name: Build with Gradle
         run: ./gradlew build assembleRelease check
       - name: Create APK
-        uses: filippoLeporati93/android-release-signer@25247783c9a02e66bf0a2ccefd9860d21563c16b # v1
+        uses: filippoLeporati93/android-release-signer@25247783c9a02e66bf0a2ccefd9860d21563c16b # v1.0.0
         id: create_apk
         with:
           releaseDirectory: app/build/outputs/apk/release
@@ -42,7 +42,7 @@ jobs:
       - name: Rename release APK
         run: mv ${{ steps.create_apk.outputs.signedReleaseFile }} DisabledLauncher.apk
       - name: Upload build artifact
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         with:
           name: DisabledLauncher-${{ github.sha }}
           path: DisabledLauncher.apk
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0188a72..f06f4ea 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,7 +18,7 @@ jobs:
       # TODO: bump version of action-contains-tag and remove this workaround step after PR above is merged
       - name: Workaround regression action-contains-tag due to git update
         run: git config --global remote.origin.followRemoteHEAD never
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
       - uses: rickstaa/action-contains-tag@a9ff27d505ba2bf074a2ebb48b208e76d35ff308 # v1.2.10
@@ -37,18 +37,18 @@ jobs:
 
       # --- from gradle.yml ---
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Set up JDK
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           java-version: "17"
           distribution: "temurin"
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5
+        uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5.0.2
       - name: Build with Gradle
         run: ./gradlew build assembleRelease check
       - name: Create APK
-        uses: filippoLeporati93/android-release-signer@25247783c9a02e66bf0a2ccefd9860d21563c16b # v1
+        uses: filippoLeporati93/android-release-signer@25247783c9a02e66bf0a2ccefd9860d21563c16b # v1.0.0
         id: create_apk
         with:
           releaseDirectory: app/build/outputs/apk/release