From 2979d838edd791b9b4ca4e859609dff89a1838b1 Mon Sep 17 00:00:00 2001
From: "red-hat-konflux[bot]"
 <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Date: Sat, 8 Aug 2026 01:49:10 +0000
Subject: [PATCH] Pin dependencies

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
---
 .github/workflows/auto-merge.yaml     | 2 +-
 .github/workflows/checks-codecov.yaml | 2 +-
 .github/workflows/fullsend.yaml       | 2 +-
 .github/workflows/label-pr-size.yaml  | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/auto-merge.yaml b/.github/workflows/auto-merge.yaml
index bd7ad08cf..ea19c33d8 100644
--- a/.github/workflows/auto-merge.yaml
+++ b/.github/workflows/auto-merge.yaml
@@ -22,7 +22,7 @@ name: 'Auto merge'
 
 jobs:
   auto-merge:
-    uses: conforma/github-workflows/.github/workflows/auto-merge.yaml@main
+    uses: conforma/github-workflows/.github/workflows/auto-merge.yaml@e049ae95d6a78c4665e88efa667981184394e913 # main
     secrets: inherit
     permissions:
       pull-requests: write
diff --git a/.github/workflows/checks-codecov.yaml b/.github/workflows/checks-codecov.yaml
index f5aeb70fb..c7b2e3411 100644
--- a/.github/workflows/checks-codecov.yaml
+++ b/.github/workflows/checks-codecov.yaml
@@ -61,7 +61,7 @@ jobs:
           cache: false
 
       - name: Check go versions
-        uses: conforma/github-workflows/golang-version-check@main
+        uses: conforma/github-workflows/golang-version-check@e049ae95d6a78c4665e88efa667981184394e913 # main
 
       - name: Show git sha and commit subject
         run: git log --oneline -n1
diff --git a/.github/workflows/fullsend.yaml b/.github/workflows/fullsend.yaml
index 7820e5474..5a0a28c60 100644
--- a/.github/workflows/fullsend.yaml
+++ b/.github/workflows/fullsend.yaml
@@ -57,7 +57,7 @@ jobs:
     if: >-
       github.event_name != 'issue_comment'
       || github.event.comment.user.type != 'Bot'
-    uses: conforma/.fullsend/.github/workflows/dispatch.yml@main
+    uses: conforma/.fullsend/.github/workflows/dispatch.yml@87c4a29e530c4231be1ff214f81765f03cc178ff # main
     with:
       event_action: ${{ github.event.action }}
 
diff --git a/.github/workflows/label-pr-size.yaml b/.github/workflows/label-pr-size.yaml
index 226cf53ce..af8a2b737 100644
--- a/.github/workflows/label-pr-size.yaml
+++ b/.github/workflows/label-pr-size.yaml
@@ -29,4 +29,4 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Label PR by size
-        uses: conforma/pr-size-label-action@v1.2.0
+        uses: conforma/pr-size-label-action@9bff907ec68d5dcee52ee8b6a62cf48cf9cf3e49 # v1.2.0