From a957c8db22cf88d9cfd2fe5c47495b617f918b2e Mon Sep 17 00:00:00 2001
From: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com>
Date: Thu, 3 Oct 2024 11:04:17 -0400
Subject: [PATCH] feat: update versions for actions (#380)

Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>
---
 .github/workflows/dependabot-build.yml | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/dependabot-build.yml b/.github/workflows/dependabot-build.yml
index 6b3c2028..cd942eba 100644
--- a/.github/workflows/dependabot-build.yml
+++ b/.github/workflows/dependabot-build.yml
@@ -19,17 +19,16 @@ jobs:
     steps:
       - name: Fetch Dependabot metadata
         id: dependabot-metadata
-        uses: dependabot/fetch-metadata@v1
+        uses: dependabot/fetch-metadata@v2.2.0
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@dbb049abf0d677abbd7f7eee0375145b417fdd34 #v4.2.0
         if: ${{ steps.dependabot-metadata.outputs.package-ecosystem == 'npm_and_yarn' }}
         with:
           ref: ${{ github.head_ref }}
-          token: ${{ secrets.COMMIT_PAT }}
 
       - name: Set up Node.js
         if: ${{ steps.dependabot-metadata.outputs.package-ecosystem == 'npm_and_yarn' }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 #v4.0.4
         with:
           node-version: 16.x
 
@@ -46,6 +45,6 @@ jobs:
       - name: Commit changes
         if: ${{ steps.dependabot-metadata.outputs.package-ecosystem == 'npm_and_yarn' }}
         id: commit
-        uses: stefanzweifel/git-auto-commit-action@v4
+        uses: stefanzweifel/git-auto-commit-action@8621497c8c39c72f3e2a999a26b4ca1b5058a842 #v5.0.1
         with:
           commit_message: "Update dist/ after build"