From 3c6042fc95948f6d66367fe01501f7589c0ba84f Mon Sep 17 00:00:00 2001
From: offa <bm-dev@yandex.com>
Date: Thu, 8 May 2025 18:25:05 +0200
Subject: [PATCH] Pin Actions and enable Dependabot (#295)

---
 .github/dependabot.yml   | 6 ++++++
 .github/workflows/ci.yml | 6 +++---
 2 files changed, 9 insertions(+), 3 deletions(-)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..5ace460
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 44ac5d2..d4fc3ca 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -68,9 +68,9 @@ jobs:
           path: ~/.conan2/p/
           key: conan-${{ runner.os }}-${{ matrix.compiler }}-boost_${{ matrix.boost }}-${{ hashFiles('conanfile.py') }}
       - name: Setup Ninja
-        uses: turtlesec-no/get-ninja@main
+        uses: turtlesec-no/get-ninja@3e85fb0044ada1440765803dd87c838edf79def8
       - name: Setup MSVC
-        uses: ilammy/msvc-dev-cmd@v1
+        uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756
       - name: Install dependencies
         run: |
           pip3 install -U conan
@@ -117,7 +117,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@main
-    - uses: jidicula/clang-format-action@main
+    - uses: jidicula/clang-format-action@cd22ed667fc160ec21ab482160adf16cc79274af
       name: "Verify formatting"
       with:
         clang-format-version: 19