Checkpoint before follow-up message

Author: cursoragent

.github/actions/setup-deps/action.yml

@@ -5,13 +5,13 @@ runs:
   using: composite
   steps:
     - name: Setup Node.js
-      uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.4
+      uses: actions/setup-node@49933ea # v4.4.0
       with:
         node-version-file: .nvmrc
 
     - name: Cache deps
       id: yarn-cache
-      uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v4.0.1
+      uses: actions/cache@a3ec84 # v4.2.3
       with:
         path: |
           ./node_modules

.github/actions/setup-website-deps/action.yml

@@ -5,13 +5,13 @@ runs:
   using: composite
   steps:
     - name: Setup Node.js
-      uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.4
+      uses: actions/setup-node@49933ea # v4.4.0
       with:
         node-version-file: .nvmrc
 
     - name: Cache website deps
       id: yarn-cache-website
-      uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v4.0.1
+      uses: actions/cache@a3ec84 # v4.2.3
       with:
         path: |
           ./website/node_modules

.github/workflows/ci.yml

@@ -40,7 +40,7 @@ jobs:
     name: Typecheck
     steps:
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@11bd719 # v4.2.2
 
       - name: Setup Node.js and deps
         uses: ./.github/actions/setup-deps
@@ -54,7 +54,7 @@ jobs:
     name: Test
     steps:
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@11bd719 # v4.2.2
 
       - name: Setup Node.js and deps
         uses: ./.github/actions/setup-deps

.github/workflows/example-apps.yml

@@ -19,10 +19,10 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@11bd719 # v4.2.2
 
       - name: Setup Node.js
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.4
+        uses: actions/setup-node@49933ea # v4.4.0
         with:
           node-version: 24
           cache: 'yarn'

GITHUB_ACTIONS_SECURITY_UPDATE.md

@@ -10,9 +10,9 @@ This update enhances the security of your GitHub Actions workflows by pinning al
 
 | Action | Previous Version | New SHA (Version) | 
 |--------|------------------|-------------------|
-| `actions/checkout` | `@v4` | `@11bd71901bbe5b1630ceea73d27597364c9af683` (v4.2.2) |
-| `actions/setup-node` | `@v4` | `@60edb5dd545a775178f52524783378180af0d1f8` (v4.0.4) |
-| `actions/cache` | `@v4` | `@ab5e6d0c87105b4c9c2047343972218f562e4319` (v4.0.1) |
+| `actions/checkout` | `@v4` | `@11bd719` (v4.2.2) |
+| `actions/setup-node` | `@v4` | `@49933ea` (v4.4.0) |
+| `actions/cache` | `@v4` | `@a3ec84` (v4.2.3) |
 | `codecov/codecov-action` | `@v4` | `@54bcd8715eee62d40e33596ef5e8f0f48dbbccab` (v4.1.0) |
 | `peaceiris/actions-gh-pages` | `@v3` | `@373f7f263a76c20808c831209c920827a82a2847` (v3.9.3) |