From df29efabefa4f651d1e6436d544c50605c20d017 Mon Sep 17 00:00:00 2001
From: Matthew Paver <30728931+MatthewPaver@users.noreply.github.com>
Date: Sat, 24 Oct 2026 18:34:22 +0100
Subject: [PATCH] fix: pin GitHub Actions to reviewed commits

---
 .github/workflows/deploy-pages.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/deploy-pages.yml b/.github/workflows/deploy-pages.yml
index 331752b..9af8c05 100644
--- a/.github/workflows/deploy-pages.yml
+++ b/.github/workflows/deploy-pages.yml
@@ -19,8 +19,8 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 20
     steps:
-      - uses: actions/checkout@v7
-      - uses: actions/setup-python@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
         with:
           python-version: "3.11"
           cache: pip
@@ -44,7 +44,7 @@ jobs:
           cp -R docs/. _site/
       - name: Upload the verified Pages artifact
         if: github.event_name != 'pull_request'
-        uses: actions/upload-pages-artifact@v5
+        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5
         with:
           path: _site
 
@@ -62,4 +62,4 @@ jobs:
     steps:
       - name: Deploy the verified artifact
         id: deployment
-        uses: actions/deploy-pages@v5
+        uses: actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346 # v5