From 59a825748c41ad6288fb3765b6e58f8e1851d13c Mon Sep 17 00:00:00 2001
From: "renovate-sh-app[bot]"
 <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Date: Thu, 20 Nov 2025 09:39:05 +0000
Subject: [PATCH] chore(deps): pin dependencies

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
---
 .github/workflows/issue_commands.yml | 4 ++--
 .github/workflows/push.yml           | 2 +-
 .github/workflows/stale.yml          | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/issue_commands.yml b/.github/workflows/issue_commands.yml
index d05f563..0f7cb2d 100644
--- a/.github/workflows/issue_commands.yml
+++ b/.github/workflows/issue_commands.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Actions
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
         with:
           repository: "grafana/grafana-github-actions"
           path: ./actions
@@ -29,7 +29,7 @@ jobs:
             AWS_DS_TOKEN_CREATOR_PEM=aws-ds-token-creator:pem
       - name: "Generate token"
         id: generate_token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2
         with:
           app-id: ${{ env.AWS_DS_TOKEN_CREATOR_ID }}
           private-key: ${{ env.AWS_DS_TOKEN_CREATOR_PEM }}
diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index faf4d79..830d8b6 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
       - name: Setup
         uses: grafana/plugin-ci-workflows/actions/internal/plugins/setup@main # zizmor: ignore[unpinned-uses]
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 69feb15..08b24be 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -11,7 +11,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v10
+      - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           # start from the oldest issues when performing stale operations