From eabb4bc9d10acee5ee31a9145a27cbf1521d3243 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 22 Dec 2025 20:04:13 +0000
Subject: [PATCH 1/3] chore(deps): bump preactjs/compressed-size-action from
 2.8.0 to 2.9.0

Bumps [preactjs/compressed-size-action](https://github.com/preactjs/compressed-size-action) from 2.8.0 to 2.9.0.
- [Release notes](https://github.com/preactjs/compressed-size-action/releases)
- [Commits](https://github.com/preactjs/compressed-size-action/compare/946a292cd35bd1088e0d7eb92b69d1a8d5b5d76a...8518045ed95e94e971b83333085e1cb99aa18aa8)

---
updated-dependencies:
- dependency-name: preactjs/compressed-size-action
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/build-perf.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build-perf.yml b/.github/workflows/build-perf.yml
index d1fc937229d7..fe98c37b9456 100644
--- a/.github/workflows/build-perf.yml
+++ b/.github/workflows/build-perf.yml
@@ -48,7 +48,7 @@ jobs:
           node-version: lts/*
           cache: yarn
       - name: Track build size changes
-        uses: preactjs/compressed-size-action@946a292cd35bd1088e0d7eb92b69d1a8d5b5d76a # v2
+        uses: preactjs/compressed-size-action@8518045ed95e94e971b83333085e1cb99aa18aa8 # v2
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           build-script: build:website:fast

From 837507cf996b2edd08d2e2fc46c9ff84d76c7077 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?S=C3=A9bastien=20Lorber?= <slorber@users.noreply.github.com>
Date: Tue, 23 Dec 2025 10:39:25 +0100
Subject: [PATCH 2/3] Update .github/workflows/build-perf.yml

---
 .github/workflows/build-perf.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build-perf.yml b/.github/workflows/build-perf.yml
index fe98c37b9456..c1c7b5d7a6bf 100644
--- a/.github/workflows/build-perf.yml
+++ b/.github/workflows/build-perf.yml
@@ -48,7 +48,7 @@ jobs:
           node-version: lts/*
           cache: yarn
       - name: Track build size changes
-        uses: preactjs/compressed-size-action@8518045ed95e94e971b83333085e1cb99aa18aa8 # v2
+        uses: preactjs/compressed-size-action@8518045ed95e94e971b83333085e1cb99aa18aa8 # v2.9.0
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           build-script: build:website:fast

From f454489fe9a8e3fe00439df60aa647a3e59f9905 Mon Sep 17 00:00:00 2001
From: sebastien <lorber.sebastien@gmail.com>
Date: Tue, 23 Dec 2025 10:44:29 +0100
Subject: [PATCH 3/3] pin all github actions

---
 .github/workflows/build-hash-router.yml | 6 +++---
 .github/workflows/lint-autofix.yml      | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/build-hash-router.yml b/.github/workflows/build-hash-router.yml
index 0048d59977d8..1c74352a1aef 100644
--- a/.github/workflows/build-hash-router.yml
+++ b/.github/workflows/build-hash-router.yml
@@ -50,14 +50,14 @@ jobs:
           path: website/build
 
       #- name: Upload Website Pages artifact
-      #  uses: actions/upload-pages-artifact@v4
+      #  uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4.0.0
       #  with:
       #    path: website/build
 
       # Deploy to https://facebook.github.io/docusaurus/
       - name: Deploy to GitHub Pages
         if: ${{ github.event_name != 'pull_request' && github.ref_name == 'main' }}
-        uses: peaceiris/actions-gh-pages@v4
+        uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4.0.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           publish_dir: website/build
@@ -81,4 +81,4 @@ jobs:
   #  steps:
   #     - name: Deploy to GitHub Pages
   #      id: deployment
-  #      uses: actions/deploy-pages@v4
+  #      uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5
diff --git a/.github/workflows/lint-autofix.yml b/.github/workflows/lint-autofix.yml
index 9a6e28cd495b..a1be962fd3d3 100644
--- a/.github/workflows/lint-autofix.yml
+++ b/.github/workflows/lint-autofix.yml
@@ -42,6 +42,6 @@ jobs:
       - name: Print Diff
         run: git diff
 
-      - uses: stefanzweifel/git-auto-commit-action@v7
+      - uses: stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9 # v7.1.0
         with:
           commit_message: 'refactor: apply lint autofix'