From 118ca01cc34bd05fb10cf6c46c67f3e667f3dc6b Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 22 Oct 2023 08:23:11 +0000
Subject: [PATCH] Update all non-major github action

---
 .github/workflows/backport.yml             | 2 +-
 .github/workflows/ci.yml                   | 2 +-
 .github/workflows/commands.yml             | 2 +-
 .github/workflows/native-provider-bump.yml | 2 +-
 .github/workflows/pr-triage.yml            | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
index abda3b1..29bfc64 100644
--- a/.github/workflows/backport.yml
+++ b/.github/workflows/backport.yml
@@ -27,7 +27,7 @@ jobs:
           fetch-depth: 0
 
       - name: Open Backport PR
-        uses: zeebe-io/backport-action@v0.0.8
+        uses: zeebe-io/backport-action@2ee900dc92632adf994f8e437b6d16840fd61f58 # v0.0.9
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           github_workspace: ${{ github.workspace }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 87b5245..2d2aeac 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -26,7 +26,7 @@ jobs:
     steps:
       - name: Detect No-op Changes
         id: noop
-        uses: fkirc/skip-duplicate-actions@v5.3.0
+        uses: fkirc/skip-duplicate-actions@f75f66ce1886f00957d99748a42c724f4330bdcf # v5.3.1
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           paths_ignore: '["**.md", "**.png", "**.jpg"]'
diff --git a/.github/workflows/commands.yml b/.github/workflows/commands.yml
index 2daca6b..d79928b 100644
--- a/.github/workflows/commands.yml
+++ b/.github/workflows/commands.yml
@@ -24,7 +24,7 @@ jobs:
         fetch-depth: 0
 
     - name: Open Backport PR
-      uses: zeebe-io/backport-action@v0.0.4
+      uses: zeebe-io/backport-action@2ee900dc92632adf994f8e437b6d16840fd61f58 # v0.0.9
       with:
         github_token: ${{ secrets.GITHUB_TOKEN }}
         github_workspace: ${{ github.workspace }}
diff --git a/.github/workflows/native-provider-bump.yml b/.github/workflows/native-provider-bump.yml
index 6417f52..e0da081 100644
--- a/.github/workflows/native-provider-bump.yml
+++ b/.github/workflows/native-provider-bump.yml
@@ -67,7 +67,7 @@ jobs:
 
       - name: New pull request
         if: steps.bump-mk.outputs.bumped != ''
-        uses: peter-evans/create-pull-request@v5.0.1
+        uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38 # v5.0.2
         with:
           title: Bump native provider to version ${{ steps.bump-mk.outputs.version }}
           commit-message: Bump native provider to version ${{ steps.bump-mk.outputs.version }}
diff --git a/.github/workflows/pr-triage.yml b/.github/workflows/pr-triage.yml
index 8547af0..3cdb458 100644
--- a/.github/workflows/pr-triage.yml
+++ b/.github/workflows/pr-triage.yml
@@ -35,7 +35,7 @@ jobs:
               labels: ["community"]
             })
       - name: Add PR to Extensions Community Support project
-        uses: actions/add-to-project@v0.4.0
+        uses: actions/add-to-project@31b3f3ccdc584546fc445612dec3f38ff5edb41c # v0.5.0
         with:
           project-url: https://github.com/orgs/upbound/projects/104/views/1
           github-token: ${{ secrets.UPBOUND_BOT_GITHUB_TOKEN }}