From 7a51d7d383e7398a1aa7ed0d7d7b7fd94372a1aa Mon Sep 17 00:00:00 2001
From: "itv-github-actions-pinner[bot]"
 <291802493+itv-github-actions-pinner[bot]@users.noreply.github.com>
Date: Wed, 29 Jul 2026 16:25:15 +0000
Subject: [PATCH] fix(security): pin dependencies

---
 .github/workflows/test.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index a9d8700..cebcca1 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -14,10 +14,10 @@ jobs:
     runs-on: dev-target-airtable
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
 
       - name: Set up Python 3.10
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: "3.10"
           cache: 'pip'
@@ -26,7 +26,7 @@ jobs:
         run: pip install poetry
 
       - name: Cache Poetry dependencies
-        uses: actions/cache@v3
+        uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3
         with:
           path: |
             ~/.cache/pypoetry