From 98006d925b5310497c9fe340d381c7c045e9f0e9 Mon Sep 17 00:00:00 2001
From: Nara Kasbergen <nara.kasbergen@gmail.com>
Date: Fri, 24 Nov 2023 11:46:30 +0100
Subject: [PATCH] chore(deps): update pinned versions of GitHub Actions

---
 .github/workflows/auto-approve.yml            | 2 +-
 .github/workflows/automerge.yml               | 2 +-
 .github/workflows/pr-copyright.yml            | 2 +-
 .github/workflows/synth.yml                   | 2 +-
 .github/workflows/test-against-regression.yml | 2 +-
 .github/workflows/upgrade-node.yml            | 2 +-
 6 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/auto-approve.yml b/.github/workflows/auto-approve.yml
index b56bf4a..dec891c 100644
--- a/.github/workflows/auto-approve.yml
+++ b/.github/workflows/auto-approve.yml
@@ -16,7 +16,7 @@ jobs:
     if: contains(github.event.pull_request.labels.*.name, 'auto-approve') && github.event.pull_request.draft == false
     steps:
       - name: Checkout PR
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
diff --git a/.github/workflows/automerge.yml b/.github/workflows/automerge.yml
index 973a773..53a33fe 100644
--- a/.github/workflows/automerge.yml
+++ b/.github/workflows/automerge.yml
@@ -16,7 +16,7 @@ jobs:
     if: contains(github.event.pull_request.labels.*.name, 'automerge') && github.event.pull_request.draft == false
     steps:
       - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Turn on automerge for this PR by trusted users
         if: github.event.pull_request.user.login == 'team-tf-cdk' || contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.pull_request.author_association) || github.actor == 'dependabot[bot]'
         env:
diff --git a/.github/workflows/pr-copyright.yml b/.github/workflows/pr-copyright.yml
index f914a6c..789fc83 100644
--- a/.github/workflows/pr-copyright.yml
+++ b/.github/workflows/pr-copyright.yml
@@ -16,7 +16,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
diff --git a/.github/workflows/synth.yml b/.github/workflows/synth.yml
index 8dfd50a..dfecea4 100644
--- a/.github/workflows/synth.yml
+++ b/.github/workflows/synth.yml
@@ -18,7 +18,7 @@ jobs:
       image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform
     steps:
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: ensure correct user
         run: chown -R root /__w/cdktf-integration-serverless-example/
       - name: Install dependencies
diff --git a/.github/workflows/test-against-regression.yml b/.github/workflows/test-against-regression.yml
index 7be2fbd..760a32a 100644
--- a/.github/workflows/test-against-regression.yml
+++ b/.github/workflows/test-against-regression.yml
@@ -18,7 +18,7 @@ jobs:
       image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform
     steps:
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: ensure correct user
         run: chown -R root /__w/cdktf-integration-serverless-example/
       - name: Install Dependencies
diff --git a/.github/workflows/upgrade-node.yml b/.github/workflows/upgrade-node.yml
index 1c32341..c0b662c 100644
--- a/.github/workflows/upgrade-node.yml
+++ b/.github/workflows/upgrade-node.yml
@@ -47,7 +47,7 @@ jobs:
           echo "short=$NEW_NODEJS_VERSION_SHORT" >> $GITHUB_OUTPUT
       - name: Create Pull Request
         if: env.CURRENT_NODEJS_VERSION_SHORT != env.NEW_NODEJS_VERSION_SHORT
-        uses: peter-evans/create-pull-request@284f54f989303d2699d373481a0cfa13ad5a6666 # v5.0.1
+        uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38 # v5.0.2
         with:
           commit-message: "chore!: increase minimum supported Node.js version to ${{ steps.latest_version.outputs.short }}"
           branch: auto/upgrade-node-${{ steps.latest_version.outputs.short }}