From d7486206ffaf9eb7b93c38150921f7127ef9b85f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 23 Aug 2026 19:56:20 +0000
Subject: [PATCH] fix(github-actions): pin dependencies

---
 .github/workflows/build.yml | 10 +++++-----
 .github/workflows/lint.yml  |  8 ++++----
 pyproject.toml              |  2 +-
 3 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 199dad2..00622a6 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -44,18 +44,18 @@ jobs:
       # Full history and tags: poetry-dynamic-versioning derives the version from git state, so a
       # shallow clone would build the wrong number rather than fail.
       - name: Check out source repository
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
         with:
           persist-credentials: false
           fetch-depth: 0
           fetch-tags: true
           ref: ${{ inputs.ref || github.ref }}
       - name: Set up Python
-        uses: actions/setup-python@v7
+        uses: actions/setup-python@v7.0.0
         with:
-          python-version: "3.13"
+          python-version: "3.13.15"
       - name: Install and configure Poetry
-        uses: snok/install-poetry@a783c322200f0519c7926aa6faa857c4e23e9263 # v1
+        uses: snok/install-poetry@a783c322200f0519c7926aa6faa857c4e23e9263 # v1.4.2
         with:
           version: 2.4.1
           virtualenvs-create: true
@@ -86,7 +86,7 @@ jobs:
       # Upload artifacts for later use
       - name: Upload Artifacts
         if: matrix.reqstool-source == 'pypi'
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: ${{ inputs.artifact-name || 'dist' }}
           path: dist/
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 60eaca9..7b2eff9 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -11,13 +11,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out source repository
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
       - name: Set up Python
-        uses: actions/setup-python@v7
+        uses: actions/setup-python@v7.0.0
         with:
-          python-version: "3.13"
+          python-version: "3.13.15"
       - name: Install and configure Poetry (this should ideally be done from pyproject.toml but..)
-        uses: snok/install-poetry@a783c322200f0519c7926aa6faa857c4e23e9263 # v1
+        uses: snok/install-poetry@a783c322200f0519c7926aa6faa857c4e23e9263 # v1.4.2
         with:
           version: 1.8.5
           virtualenvs-create: true
diff --git a/pyproject.toml b/pyproject.toml
index 8bb2477..a4c3ed8 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -25,7 +25,7 @@ classifiers = [
 ]
 
 [tool.poetry.dependencies]
-python = "^3.13"
+python = "3.14.7"
 poetry = "2.4.1"
 reqstool-python-decorators = "0.1.0"
 poetry-dynamic-versioning = "1.10.0"