Run bin/pin-github-actions.js

Author: gonzaloriestra

.github/workflows/security-code-scanner.yml

@@ -1,9 +1,9 @@
 name: 'Shopify Security Code Scanner'
 
-on: [push]
+on: [ push ]
 
 jobs:
   Security-Code-Scanner:
-    uses: shopify/security-code-scanner/.github/workflows/main.yml@main
+    uses: shopify/security-code-scanner/.github/workflows/main.yml@5f7400975eed0698f96a6f718438353ae643a9d0 # pin@main
     secrets:
       token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/snapit.yml

@@ -26,13 +26,18 @@ jobs:
       - name: Force snapshot changeset
         run: "mv .changeset/force-snapshot-build.md.ignore .changeset/force-snapshot-build.md"
       - name: Create snapshot version
-        uses: Shopify/snapit@0c0d2dd62c9b0c94b7d03e1f54e72f18548e7752 # pin to a specific commit
+        uses: Shopify/snapit@938148c6c89d82cf32e0a377f8f7c0bff39bc989 # pin@main
         with:
           global_install: 'true'
           github_comment_included_packages: '@shopify/cli'
-          custom_message_suffix: "\n> After installing, validate the version by running just `shopify` in your terminal\n> If the versions don't match, you might have multiple global instances installed.\n> Use `which shopify` to find out which one you are running and uninstall it."
+          custom_message_suffix: "
+
+            > After installing, validate the version by running just `shopify` in your terminal
+
+            > If the versions don't match, you might have multiple global instances installed.
+
+            > Use `which shopify` to find out which one you are running and uninstall it."
           build_script: "pnpm nx run-many --target=bundle --all --skip-nx-cache --output-style=stream"
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-

.github/workflows/update-graphql-deps.yml

@@ -3,7 +3,8 @@ name: Update GraphQL Dependencies
 on:
   schedule:
     - cron: '13 0,6,12,18 * * *' # Runs at 00:13, 06:13, 12:13, and 18:13 UTC
-  workflow_dispatch:  # Allows manual triggering from the GitHub UI
+  workflow_dispatch:
+    # Allows manual triggering from the GitHub UI
 
 env:
   DEBUG: '1'

.github/workflows/workflow-cleaner.yml

@@ -48,7 +48,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Delete workflow runs
-        uses: Mattraks/delete-workflow-runs@5ebc537fc6b4f5c1634865f0030271fb6776b28d # pin@v2
+        uses: Mattraks/delete-workflow-runs@4c9f24749b7996562658e3d6e10662489e22caca # pin@v2
         with:
           token: ${{ github.token }}
           repository: ${{ github.repository }}