From 1dadfe01a34a9b9de3d85fef62ddf19836069811 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 19 Apr 2026 11:36:56 +0000
Subject: [PATCH] Pin dependencies

---
 .github/workflows/build_and_deploy.yml        | 24 +++++++++----------
 .../pull_request_build_and_deploy.yml         |  6 ++---
 2 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/build_and_deploy.yml b/.github/workflows/build_and_deploy.yml
index 80aaec38..230a5eff 100644
--- a/.github/workflows/build_and_deploy.yml
+++ b/.github/workflows/build_and_deploy.yml
@@ -9,10 +9,10 @@ name: Build and deploy
 jobs:
   build:
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.3.1
       - name: Cache node modules
         id: cache-npm
-        uses: actions/cache@v4
+        uses: actions/cache@v4.3.0
         env:
           cache-name: cache-node-modules
         with:
@@ -48,7 +48,7 @@ jobs:
         env:
           REACT_APP_VERSION: ${{ github.sha }}
       - name: Archive production artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v4.6.2
         with:
           name: build
           path: |
@@ -59,10 +59,10 @@ jobs:
     needs: [build]
     environment: 'dev'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.3.1
       - name: Download all workflow run artifacts
-        uses: actions/download-artifact@v4
-      - uses: FirebaseExtended/action-hosting-deploy@v0
+        uses: actions/download-artifact@v4.3.0
+      - uses: FirebaseExtended/action-hosting-deploy@v0.10.0
         with:
           repoToken: '${{ secrets.GITHUB_TOKEN }}'
           firebaseServiceAccount: '${{ secrets.FIREBASE_SERVICE_ACCOUNT_UDUG_DEV }}'
@@ -73,10 +73,10 @@ jobs:
     needs: [deploy_dev]
     environment: 'staging'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.3.1
       - name: Download all workflow run artifacts
-        uses: actions/download-artifact@v4
-      - uses: FirebaseExtended/action-hosting-deploy@v0
+        uses: actions/download-artifact@v4.3.0
+      - uses: FirebaseExtended/action-hosting-deploy@v0.10.0
         with:
           repoToken: '${{ secrets.GITHUB_TOKEN }}'
           firebaseServiceAccount: '${{ secrets.FIREBASE_SERVICE_ACCOUNT_UDUG_STAGING }}'
@@ -87,10 +87,10 @@ jobs:
     needs: [deploy_dev, deploy_staging]
     environment: 'prod'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.3.1
       - name: Download all workflow run artifacts
-        uses: actions/download-artifact@v4
-      - uses: FirebaseExtended/action-hosting-deploy@v0
+        uses: actions/download-artifact@v4.3.0
+      - uses: FirebaseExtended/action-hosting-deploy@v0.10.0
         with:
           repoToken: '${{ secrets.GITHUB_TOKEN }}'
           firebaseServiceAccount: '${{ secrets.FIREBASE_SERVICE_ACCOUNT_UDUG_PROD }}'
diff --git a/.github/workflows/pull_request_build_and_deploy.yml b/.github/workflows/pull_request_build_and_deploy.yml
index 3c072ad7..07c2bf1f 100644
--- a/.github/workflows/pull_request_build_and_deploy.yml
+++ b/.github/workflows/pull_request_build_and_deploy.yml
@@ -8,10 +8,10 @@ jobs:
     if: '${{ github.event.pull_request.head.repo.full_name == github.repository }}'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.3.1
       - name: Cache node modules
         id: cache-npm
-        uses: actions/cache@v4
+        uses: actions/cache@v4.3.0
         env:
           cache-name: cache-node-modules
         with:
@@ -44,7 +44,7 @@ jobs:
             -Dsonar.test.inclusions=src/**/*.test.ts
             -Dsonar.typescript.lcov.reportPaths=coverage/lcov.info
       - run: npm run build
-      - uses: FirebaseExtended/action-hosting-deploy@v0
+      - uses: FirebaseExtended/action-hosting-deploy@v0.10.0
         with:
           repoToken: '${{ secrets.GITHUB_TOKEN }}'
           firebaseServiceAccount: '${{ secrets.FIREBASE_SERVICE_ACCOUNT_UDUG_DEV }}'