From da7e29ad6c0f72db48b60576b8688c27cd8f74d1 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 31 Mar 2022 21:55:06 +0200
Subject: [PATCH] chore(deps): pin dependencies (#2366)

Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
---
 .github/workflows/meta-label-pr-ci-status.yaml  | 8 ++++----
 .github/workflows/metadata-label-commenter.yaml | 4 ++--
 .github/workflows/metadata-label-pr.yaml        | 2 +-
 .github/workflows/schedule-sync-labels.yaml     | 4 ++--
 .github/workflows/stale.yaml                    | 2 +-
 5 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/meta-label-pr-ci-status.yaml b/.github/workflows/meta-label-pr-ci-status.yaml
index a967ab3e89a..d220665eace 100644
--- a/.github/workflows/meta-label-pr-ci-status.yaml
+++ b/.github/workflows/meta-label-pr-ci-status.yaml
@@ -14,12 +14,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
         with:
           token: ${{ secrets.BOT_TOKEN }}
 
       - name: Download workflow artifact
-        uses: dawidd6/action-download-artifact@v2.17.0
+        uses: dawidd6/action-download-artifact@575b1e4167df67acf7e692af784566618b23c71e # tag=v2.17.0
         with:
           github_token: ${{ secrets.BOT_TOKEN }}
           workflow: pr-validate.yaml
@@ -29,12 +29,12 @@ jobs:
 
       - name: Read the pr_number file
         id: pr_num_reader
-        uses: juliangruber/read-file-action@v1.1.4
+        uses: juliangruber/read-file-action@ebfa650188272343fef925480eb4d18c5d49b925 # tag=v1.1.4
         with:
           path: ./pr_metadata/pr_number.txt
 
       - name: "Get workflow job status"
-        uses: actions/github-script@v6
+        uses: actions/github-script@9ac08808f993958e9de277fe43a64532a609130e # tag=v6
         id: get-workflow-jobs
         with:
           github-token: ${{ secrets.BOT_TOKEN }}
diff --git a/.github/workflows/metadata-label-commenter.yaml b/.github/workflows/metadata-label-commenter.yaml
index 168a041aa5f..8b0686ff680 100644
--- a/.github/workflows/metadata-label-commenter.yaml
+++ b/.github/workflows/metadata-label-commenter.yaml
@@ -22,11 +22,11 @@ jobs:
     name: Label commenter
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
         with:
           token: ${{ secrets.BOT_TOKEN }}
           ref: master
 
-      - uses: peaceiris/actions-label-commenter@v1
+      - uses: peaceiris/actions-label-commenter@f0dbbef043eb1b150b566db36b0bdc8b7f505579 # tag=v1
         with:
           github_token: ${{ secrets.BOT_TOKEN }}
diff --git a/.github/workflows/metadata-label-pr.yaml b/.github/workflows/metadata-label-pr.yaml
index 12cb7138e14..2b9785ee8c9 100644
--- a/.github/workflows/metadata-label-pr.yaml
+++ b/.github/workflows/metadata-label-pr.yaml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Label Size
-        uses: pascalgn/size-label-action@v0.4.3
+        uses: pascalgn/size-label-action@1619680c5ac1ef360b944bb56a57587ba4aa2af8 # tag=v0.4.3
         env:
           GITHUB_TOKEN: "${{ secrets.BOT_TOKEN }}"
         with:
diff --git a/.github/workflows/schedule-sync-labels.yaml b/.github/workflows/schedule-sync-labels.yaml
index 001877c309d..9a0f963166b 100644
--- a/.github/workflows/schedule-sync-labels.yaml
+++ b/.github/workflows/schedule-sync-labels.yaml
@@ -12,12 +12,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
         with:
           token: ${{ secrets.BOT_TOKEN }}
 
       - name: Sync Labels
-        uses: EndBug/label-sync@v2
+        uses: EndBug/label-sync@d682578e83bb20820aef1d1cda75aaa795f217ae # tag=v2
         with:
           config-file: |
               https://raw.githubusercontent.com/truecharts/.github/main/.github/labels.yaml
diff --git a/.github/workflows/stale.yaml b/.github/workflows/stale.yaml
index fb649a1487f..0d8597180b4 100644
--- a/.github/workflows/stale.yaml
+++ b/.github/workflows/stale.yaml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Check for stale issues and PRs
-        uses: actions/stale@v5
+        uses: actions/stale@3cc123766321e9f15a6676375c154ccffb12a358 # tag=v5
         with:
           repo-token: ${{ secrets.BOT_TOKEN }}
           days-before-issue-stale: 180