From c8c478ce6841b1ca1040d028c46c74490f1f92c4 Mon Sep 17 00:00:00 2001
From: Muneyoshi Harukawa <harukawa@a-tm.co.jp>
Date: Wed, 11 Jun 2025 09:14:52 +0900
Subject: [PATCH] Use hash for github action

---
 .github/workflows/rspec.yml | 4 ++--
 CHANGELOG.md                | 1 +
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/rspec.yml b/.github/workflows/rspec.yml
index 5bfa545..70bd448 100644
--- a/.github/workflows/rspec.yml
+++ b/.github/workflows/rspec.yml
@@ -11,8 +11,8 @@ jobs:
       matrix:
         ruby-version: ['3.2', '3.3', '3.4']
     steps:
-      - uses: actions/checkout@v3
-      - uses: ruby/setup-ruby@v1
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+      - uses: ruby/setup-ruby@13e7a03dc3ac6c3798f4570bfead2aed4d96abfb # v1.244.0
         with:
           ruby-version: ${{ matrix.ruby-version }}
           bundler-cache: true
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9850025..89f18a2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,7 @@
 ## Unreleased
 
 - Require Ruby 3.2.0 or higher
+- Pin github actions
 
 ## v1.5.0