From b66790cc300942e240895740ef5f859f5dccfd3e Mon Sep 17 00:00:00 2001
From: Silviu Troscot <silviu.troscot10@gmail.com>
Date: Wed, 17 Jun 2026 14:48:01 +0300
Subject: [PATCH 1/2] use commit hashes for actions

---
 action.yml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/action.yml b/action.yml
index 553533b..d3efc7f 100644
--- a/action.yml
+++ b/action.yml
@@ -27,25 +27,25 @@ outputs:
 runs:
   using: "composite"
   steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - name: Install dependency
         run: |
           sudo apt-get update
           sudo apt-get install -y pkg-config build-essential libudev-dev
         shell: bash
-      - uses: dtolnay/rust-toolchain@master
+      - uses: dtolnay/rust-toolchain@efa25f7f19611383d5b0ccf2d1c8914531636bf9 # master
         with:
           components: rustfmt, clippy
           toolchain: ${{ inputs.rust-version }}
       - name: Rust Cache
         id: rust-cache
-        uses: Swatinem/rust-cache@v2
+        uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
         with:
           cache-on-failure: true
           shared-key: ${{ inputs.rust-shared-key }}
           key: solana-${{ inputs.solana-version }}
           workspaces: ${{ inputs.workspace }}
-      - uses: actions/cache@v3
+      - uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3
         name: Cache Solana Tool Suite
         id: cache-solana
         with:
@@ -55,7 +55,7 @@ runs:
           key: solana-${{ runner.os }}-v0001-${{ inputs.solana-version }}
       - name: Cache Node Modules
         if: inputs.setup-node != null
-        uses: actions/cache@v3
+        uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3
         id: cache-node-modules
         with:
           path: |
@@ -63,7 +63,7 @@ runs:
             ~/.yarn/
             ${{ inputs.workspace }}/node_modules
           key: npm-${{ runner.os }}-v0001-${{ hashFiles('**/package-lock.json') }}
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3
         with:
           node-version: ${{ inputs.setup-node }}
         if: inputs.setup-node != null

From 27dfa0f5705f5bd7103928a095811ead84f3e2f5 Mon Sep 17 00:00:00 2001
From: Silviu Troscot <silviu.troscot10@gmail.com>
Date: Wed, 17 Jun 2026 15:00:40 +0300
Subject: [PATCH 2/2] update hashes

---
 action.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/action.yml b/action.yml
index d3efc7f..71681c3 100644
--- a/action.yml
+++ b/action.yml
@@ -33,13 +33,13 @@ runs:
           sudo apt-get update
           sudo apt-get install -y pkg-config build-essential libudev-dev
         shell: bash
-      - uses: dtolnay/rust-toolchain@efa25f7f19611383d5b0ccf2d1c8914531636bf9 # master
+      - uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # master
         with:
           components: rustfmt, clippy
           toolchain: ${{ inputs.rust-version }}
       - name: Rust Cache
         id: rust-cache
-        uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
+        uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
         with:
           cache-on-failure: true
           shared-key: ${{ inputs.rust-shared-key }}