From 896778beadf5d5498c73eb690c98275a5465123d Mon Sep 17 00:00:00 2001
From: davidliu <242400+davidliu@users.noreply.github.com>
Date: Tue, 26 May 2026 13:24:42 +0000
Subject: [PATCH] chore(pinact): pin/update GitHub Actions

---
 .github/workflows/android_ci.yml | 6 +++---
 .github/workflows/ci.yml         | 8 ++++----
 .github/workflows/ios_ci.yml     | 6 +++---
 3 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/android_ci.yml b/.github/workflows/android_ci.yml
index 45147f198..5451e1b9f 100644
--- a/.github/workflows/android_ci.yml
+++ b/.github/workflows/android_ci.yml
@@ -13,12 +13,12 @@ jobs:
   android-compile:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-java@v4
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+    - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
       with:
         distribution: 'temurin'
         java-version: '17'
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
       with:
         node-version-file: '.nvmrc'
         cache: 'npm'
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 31618c5cf..4fc007920 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -7,8 +7,8 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-node@v4
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+    - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
       with:
         node-version-file: '.nvmrc'
         cache: 'npm'
@@ -27,8 +27,8 @@ jobs:
           - 'ios'
           - 'android'
     steps:
-    - uses: actions/checkout@v4
-    - uses: jidicula/clang-format-action@v4.15.0
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+    - uses: jidicula/clang-format-action@654a770daa28443dd111d133e4083e21c1075674 # v4.18.0
       with:
         clang-format-version: '17'
         check-path: ${{ matrix.path }}
diff --git a/.github/workflows/ios_ci.yml b/.github/workflows/ios_ci.yml
index 0751602c0..fef52a18e 100644
--- a/.github/workflows/ios_ci.yml
+++ b/.github/workflows/ios_ci.yml
@@ -13,15 +13,15 @@ jobs:
   ios-compile:
     runs-on: macos-latest
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-node@v4
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+    - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
       with:
         node-version-file: '.nvmrc'
         cache: 'npm'
         cache-dependency-path: '**/package-lock.json'
 
     - name: Cache cocoapods
-      uses: actions/cache@v3
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
       with:
         path: ./examples/GumTestApp/ios/Pods
         key: ${{ runner.os }}-pods-${{ hashFiles('**/Podfile.lock') }}