From 53b192bdd0319df5011d194cbabe74d82dae87ec Mon Sep 17 00:00:00 2001
From: Luca Forstner <luca.forstner@gmail.com>
Date: Mon, 23 Mar 2026 22:48:45 +0100
Subject: [PATCH 1/2] chore: Pin github actions to commit

This PR pins all GitHub actions in this repository to a specific git SHA. It was created automatically.
---
 .github/workflows/publish-gem-prerelease.yaml | 4 ++--
 .github/workflows/publish-gem.yaml            | 8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/publish-gem-prerelease.yaml b/.github/workflows/publish-gem-prerelease.yaml
index 35b5527a..abb64733 100644
--- a/.github/workflows/publish-gem-prerelease.yaml
+++ b/.github/workflows/publish-gem-prerelease.yaml
@@ -24,12 +24,12 @@ jobs:
       id-token: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           ref: ${{ github.event.inputs.ref }}
 
       - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
+        uses: ruby/setup-ruby@319994f95fa847cf3fb3cd3dbe89f6dcde9f178f # v1.295.0
         with:
           ruby-version: '3.4'
           bundler-cache: true
diff --git a/.github/workflows/publish-gem.yaml b/.github/workflows/publish-gem.yaml
index 945150a3..317b464f 100644
--- a/.github/workflows/publish-gem.yaml
+++ b/.github/workflows/publish-gem.yaml
@@ -16,7 +16,7 @@ jobs:
     outputs:
       release_tag: ${{ steps.get-tag.outputs.tag }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           fetch-depth: 0
 
@@ -25,7 +25,7 @@ jobs:
         run: echo "tag=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT
 
       - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
+        uses: ruby/setup-ruby@319994f95fa847cf3fb3cd3dbe89f6dcde9f178f # v1.295.0
         with:
           ruby-version: '3.4'
           bundler-cache: true
@@ -42,12 +42,12 @@ jobs:
       id-token: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           fetch-depth: 0
 
       - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
+        uses: ruby/setup-ruby@319994f95fa847cf3fb3cd3dbe89f6dcde9f178f # v1.295.0
         with:
           ruby-version: '3.4'
           bundler-cache: true

From 5e9eea8869abac357199dda5025e23764cbd58de Mon Sep 17 00:00:00 2001
From: Luca Forstner <luca.forstner@gmail.com>
Date: Mon, 23 Mar 2026 23:03:30 +0100
Subject: [PATCH 2/2] chore: Pin github actions to commit

This PR pins all GitHub actions in this repository to a specific git SHA. It was created automatically.
---
 .github/workflows/publish-gem-prerelease.yaml | 3 +--
 .github/workflows/publish-gem.yaml            | 3 +--
 2 files changed, 2 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/publish-gem-prerelease.yaml b/.github/workflows/publish-gem-prerelease.yaml
index abb64733..e59a93bf 100644
--- a/.github/workflows/publish-gem-prerelease.yaml
+++ b/.github/workflows/publish-gem-prerelease.yaml
@@ -43,8 +43,7 @@ jobs:
         run: bundle config set --local frozen false
 
       - name: Configure RubyGems credentials
-        uses: rubygems/configure-rubygems-credentials@main
-
+        uses: rubygems/configure-rubygems-credentials@a991f145d5e4a60c4b0a3ddb204f557dc1a4f985 # main
       - name: Build and publish prerelease
         run: bundle exec rake release:prerelease
         env:
diff --git a/.github/workflows/publish-gem.yaml b/.github/workflows/publish-gem.yaml
index 317b464f..a06a6454 100644
--- a/.github/workflows/publish-gem.yaml
+++ b/.github/workflows/publish-gem.yaml
@@ -53,8 +53,7 @@ jobs:
           bundler-cache: true
 
       - name: Configure RubyGems credentials
-        uses: rubygems/configure-rubygems-credentials@main
-
+        uses: rubygems/configure-rubygems-credentials@a991f145d5e4a60c4b0a3ddb204f557dc1a4f985 # main
       - name: Release
         run: bundle exec rake release
         env: