From b1f6a936b1774a8f407763c52f070acba261b357 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 8 Jan 2026 11:39:23 +0000
Subject: [PATCH] chore(deps): pin dependencies

---
 .github/workflows/release.yaml | 2 +-
 .github/workflows/test.yaml    | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 94219c2..14fe24c 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -90,7 +90,7 @@ jobs:
           echo "BIN_PATH=${BIN_PATH}" >> $GITHUB_ENV
 
       - name: Upload artifact to release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2
         with:
           tag_name: ${{ github.ref_name }}
           files: |
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 64e0cb7..5c07a24 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -43,7 +43,7 @@ jobs:
           go-version: '1.25'
 
       - name: Install kubectl
-        uses: azure/setup-kubectl@v4
+        uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
         with:
           version: 'v1.29.0' # any modern kubectl compatible with k3d's default