From c1928e19a7d6ebfd82c5335ecf10a4151ff79460 Mon Sep 17 00:00:00 2001
From: Tomasz Tylenda <tomasz.tylenda@sonarsource.com>
Date: Wed, 29 Apr 2026 16:31:21 +0200
Subject: [PATCH] Unpin SonarSource GitHub actions

---
 .github/workflows/build.yml   | 4 ++--
 .github/workflows/dogfood.yml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 86d4cfdb4a8..df37f3887c8 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -92,7 +92,7 @@ jobs:
           develocity-url: ${{ env.DEVELOCITY_URL }}
       - name: Getting Vault Secrets
         id: secrets
-        uses: SonarSource/vault-action-wrapper@320bd31b03e5dacaac6be51bbbb15adf7caccc32 # v3.1.0
+        uses: SonarSource/vault-action-wrapper@v3
         with:
           secrets: |
             development/github/token/licenses-ro token | GITHUB_TOKEN;
@@ -159,7 +159,7 @@ jobs:
           develocity-url: ${{ env.DEVELOCITY_URL }}
       - name: Getting Vault Secrets
         id: secrets
-        uses: SonarSource/vault-action-wrapper@320bd31b03e5dacaac6be51bbbb15adf7caccc32 # v3.1.0
+        uses: SonarSource/vault-action-wrapper@v3
         with:
           secrets: |
             development/github/token/licenses-ro token | GITHUB_TOKEN;
diff --git a/.github/workflows/dogfood.yml b/.github/workflows/dogfood.yml
index 76ec2b36e1f..40a041e86d8 100644
--- a/.github/workflows/dogfood.yml
+++ b/.github/workflows/dogfood.yml
@@ -19,7 +19,7 @@ jobs:
     steps:
     - name: get secrets
       id: secrets
-      uses: SonarSource/vault-action-wrapper@c154b4a417b51cb98dd71137f49bf20e77c56820  # v3.4.0
+      uses: SonarSource/vault-action-wrapper@v3
       with:
         secrets: |
           development/kv/data/slack webhook | SLACK_WEBHOOK;