From f6109461264a74f479da0d4796313fcc219dfc20 Mon Sep 17 00:00:00 2001
From: Queue_sys <29653819+Quesys-tech@users.noreply.github.com>
Date: Sat, 27 Jun 2026 12:23:03 +0900
Subject: [PATCH] chore: pin github actions

---
 .github/workflows/generate_vpm.yml |  6 +++---
 .github/workflows/publish.yml      | 10 +++++-----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/generate_vpm.yml b/.github/workflows/generate_vpm.yml
index b8a7301..cbe36bc 100644
--- a/.github/workflows/generate_vpm.yml
+++ b/.github/workflows/generate_vpm.yml
@@ -16,10 +16,10 @@ jobs:
   generate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           ref: ${{ github.head_ref }}
-      - uses: astral-sh/setup-uv@v7
+      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
       - run: >
           uv run main.py
           ${{ env.vpm_repo_author}}
@@ -27,6 +27,6 @@ jobs:
           ${{ env.vpm_repo_name }}
           ${{ env.vpm_repo_url}}
           vpm.json
-      - uses: stefanzweifel/git-auto-commit-action@v7
+      - uses: stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9 # v7.1.0
         with:
           commit_message: "chore: update vpm.json"
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index b7f90b6..26c487d 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -22,9 +22,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - name: Setup Pages
-        uses: actions/configure-pages@v6
+        uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
       - name: copy files
         run: |
           mkdir _upload
@@ -32,12 +32,12 @@ jobs:
           cp ./*.md _upload
           cp ./vpm.json _upload
       - name: Build with Jekyll
-        uses: actions/jekyll-build-pages@v1
+        uses: actions/jekyll-build-pages@44a6e6beabd48582f863aeeb6cb2151cc1716697 # v1.0.13
         with:
           source: ./_upload
           destination: ./_site
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v5
+        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
 
   deploy:
     environment:
@@ -48,4 +48,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v5
\ No newline at end of file
+        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
\ No newline at end of file