From 2ce5b0c8d29181e096842b5ca25acb855d0d8b92 Mon Sep 17 00:00:00 2001 From: Felipe Knorr Kuhn Date: Wed, 19 Aug 2026 14:09:42 +0900 Subject: [PATCH 1/2] Update workflow pins --- .github/workflows/project-review-status.yml | 2 +- .github/workflows/validate-logos.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/project-review-status.yml b/.github/workflows/project-review-status.yml index 730208e..af97396 100644 --- a/.github/workflows/project-review-status.yml +++ b/.github/workflows/project-review-status.yml @@ -11,7 +11,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Update Project Status to Review Needed - uses: actions/github-script@v7 + uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7 with: # Use the PAT stored in repository secrets (has project write access) github-token: ${{ secrets.PROJECT_TOKEN }} diff --git a/.github/workflows/validate-logos.yml b/.github/workflows/validate-logos.yml index cdfdfed..91b65a8 100644 --- a/.github/workflows/validate-logos.yml +++ b/.github/workflows/validate-logos.yml @@ -13,10 +13,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: '20' From 3ef5ebb5d2dfe67810a595215493219486a92d15 Mon Sep 17 00:00:00 2001 From: Felipe Knorr Kuhn Date: Wed, 19 Aug 2026 15:32:31 +0900 Subject: [PATCH 2/2] Update versions --- .github/workflows/project-review-status.yml | 2 +- .github/workflows/validate-logos.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/project-review-status.yml b/.github/workflows/project-review-status.yml index af97396..88e1c91 100644 --- a/.github/workflows/project-review-status.yml +++ b/.github/workflows/project-review-status.yml @@ -11,7 +11,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Update Project Status to Review Needed - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: # Use the PAT stored in repository secrets (has project write access) github-token: ${{ secrets.PROJECT_TOKEN }} diff --git a/.github/workflows/validate-logos.yml b/.github/workflows/validate-logos.yml index 91b65a8..5f5e2b3 100644 --- a/.github/workflows/validate-logos.yml +++ b/.github/workflows/validate-logos.yml @@ -13,10 +13,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Node.js - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: '20'