From ac61ea2289ceb7aa1f1a6067002b33874d65f323 Mon Sep 17 00:00:00 2001
From: LizardByte-bot <108553330+LizardByte-bot@users.noreply.github.com>
Date: Thu, 12 Feb 2026 19:05:21 +0000
Subject: [PATCH] chore: update GitHub Actions to use commit hashes

---
 .github/workflows/update-pages.yml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/update-pages.yml b/.github/workflows/update-pages.yml
index 2e99811ce..fe174cb55 100644
--- a/.github/workflows/update-pages.yml
+++ b/.github/workflows/update-pages.yml
@@ -28,10 +28,10 @@ jobs:
     timeout-minutes: 60
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
       - name: Checkout gh-pages
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           ref: gh-pages
           path: gh-pages
@@ -39,12 +39,12 @@ jobs:
           fetch-depth: 0  # otherwise, will fail to push refs to dest repo
 
       - name: Setup python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
         with:
           python-version: '3.12'
 
       - name: Setup node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238  # v6.2.0
         with:
           node-version: 'latest'
 
@@ -122,7 +122,7 @@ jobs:
 
       - name: Upload Artifacts
         if: github.event_name == 'pull_request' || github.event_name == 'workflow_dispatch'
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f  # v6.0.0
         with:
           name: gh-pages
           if-no-files-found: error
@@ -134,7 +134,7 @@ jobs:
           (github.event_name == 'push' && github.ref == 'refs/heads/master') ||
           github.event_name == 'schedule' ||
           github.event_name == 'workflow_dispatch'
-        uses: actions-js/push@v1.5
+        uses: actions-js/push@5a7cbd780d82c0c937b5977586e641b2fd94acc5  # v1.5
         with:
           github_token: ${{ secrets.GH_BOT_TOKEN }}
           author_email: ${{ secrets.GH_BOT_EMAIL }}