From f71e2d71e239ebc57ac7df8af362a4b663625651 Mon Sep 17 00:00:00 2001
From: marshmallow <git@althaea.zone>
Date: Thu, 26 Mar 2026 15:29:45 +1100
Subject: [PATCH] fix unpinned actions (#413)

---
 .github/workflows/autofix.yml | 4 ++--
 .github/workflows/labeler.yml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/autofix.yml b/.github/workflows/autofix.yml
index 84b9441..9e1291b 100644
--- a/.github/workflows/autofix.yml
+++ b/.github/workflows/autofix.yml
@@ -33,7 +33,7 @@ jobs:
           persist-credentials: false
       - uses: ./.github/actions/setup-nix
       - name: Cache Cargo
-        uses: actions/cache@v5
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7
         with:
           path: |
             ~/.cargo/bin/
@@ -42,7 +42,7 @@ jobs:
             ~/.cargo/git/db/
           key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
       - name: Cache uv
-        uses: actions/cache@v5
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7
         with:
           path: /tmp/.uv-cache
           key: uv-${{ runner.os }}-${{ hashFiles('**/uv.lock') }}
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index 27a2dad..f1cd4d4 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -9,4 +9,4 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/labeler@v6
+      - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b
-- 
2.51.2