From d77a43791fc7dab4e6e8cc32677d6b41e9ad73bf Mon Sep 17 00:00:00 2001
From: schnellert <felix.schnellert@proton.me>
Date: Fri, 5 Jun 2026 17:02:05 +0200
Subject: [PATCH] chore: update and pin actions to commit sha

---
 .github/workflows/build.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index fe91ecc..c5ea2a5 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -13,9 +13,9 @@ jobs:
       PUBLISH_TOKEN: ${{ secrets.LABYMOD_PUBLISH_TOKEN }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - name: Set up JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           distribution: 'temurin'
           java-version: '17'
@@ -24,7 +24,7 @@ jobs:
       - name: Build Release Artifacts with Gradle
         run: ./gradlew build
       - name: Upload Artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: Artifacts
           path: build/commonOutput/*.jar
@@ -32,7 +32,7 @@ jobs:
         run: chmod +x build/commonOutput/*.jar
       - name: Upload Assets to Release
         id: upload-release-asset
-        uses: sekwah41/upload-release-assets@v1.1.0
+        uses: sekwah41/upload-release-assets@c567fc0fd9cbda3da23f1b498ee7f0446b649aed # v1.1.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with: