From e0b6a865f80782b048245b3de71de93cc01085ef Mon Sep 17 00:00:00 2001
From: "mergeraptor[bot]" <267480593+mergeraptor[bot]@users.noreply.github.com>
Date: Sat, 9 May 2026 06:47:16 +0000
Subject: [PATCH] chore(deps): pin calibreapp/image-actions action to e2cc8db

---
 .github/workflows/images.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/images.yml b/.github/workflows/images.yml
index 416bfc03..895bd353 100644
--- a/.github/workflows/images.yml
+++ b/.github/workflows/images.yml
@@ -20,7 +20,7 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Compress Images
-        uses: calibreapp/image-actions@main
+        uses: calibreapp/image-actions@e2cc8db5d49c849e00844dfebf01438318e96fa2 # main
         with:
           # The `GITHUB_TOKEN` is automatically generated by GitHub and scoped only to the repository that is currently running the action. By default, the action can’t update Pull Requests initiated from forked repositories.
           # See https://docs.github.com/en/actions/reference/authentication-in-a-workflow and https://help.github.com/en/articles/virtual-environments-for-github-actions#token-permissions