From 7ae72b2f6c1ceae87aaf0112f6cb5d593022f7e9 Mon Sep 17 00:00:00 2001
From: "elastic-renovate-prod[bot]"
 <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>
Date: Thu, 30 Jul 2026 13:09:14 +0000
Subject: [PATCH] chore(deps): pin dependencies

---
 .github/workflows/code-checks.yaml | 20 ++++++++++----------
 .github/workflows/community.yml    |  4 ++--
 .github/workflows/release.yaml     |  6 +++---
 poetry.lock                        |  2 +-
 pyproject.toml                     |  8 ++++----
 5 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/.github/workflows/code-checks.yaml b/.github/workflows/code-checks.yaml
index 4446067..88d97ea 100644
--- a/.github/workflows/code-checks.yaml
+++ b/.github/workflows/code-checks.yaml
@@ -12,13 +12,13 @@ jobs:
   linting:
     runs-on: ubuntu-latest 
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         id: setup-python
         with:
           python-version: '3.12'
       - name: Set up cache
-        uses: actions/cache@v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         id: cached-poetry-dependencies
         with:
           path: ./.venv
@@ -46,7 +46,7 @@ jobs:
   license-header-check:
     runs-on: ubuntu-latest 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
       - name: Check Cortado files for a license header
         run: |
           bash ./scripts/check-license.sh ./cortado
@@ -59,12 +59,12 @@ jobs:
   unit-tests:
     runs-on: ubuntu-latest 
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: '3.12'
       - name: Set up cache
-        uses: actions/cache@v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         id: cached-poetry-dependencies
         with:
           path: ./.venv
@@ -88,13 +88,13 @@ jobs:
   dependency-check-for-minimal-package:
     runs-on: ubuntu-latest 
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         id: setup-python
         with:
           python-version: '3.12'
       - name: Set up cache
-        uses: actions/cache@v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         id: cached-poetry-dependencies
         with:
           path: ./.venv
diff --git a/.github/workflows/community.yml b/.github/workflows/community.yml
index ab46333..47a3018 100644
--- a/.github/workflows/community.yml
+++ b/.github/workflows/community.yml
@@ -23,7 +23,7 @@ jobs:
           vault-role: "token-policy-4a57efea1929"
 
       - name: Check if member of elastic org
-        uses: actions/github-script@v6
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6
         id: membership
         with:
           github-token: ${{ steps.fetch-ephemeral-token.outputs.token }}
@@ -51,7 +51,7 @@ jobs:
 
 
       - name: Add label for community members
-        uses: actions/github-script@v6
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6
         if: ${{ steps.membership.outputs.result == 'notMember' }}
         with:
           script: |
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 2ef037b..285ec96 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -11,16 +11,16 @@ jobs:
       contents: write
     runs-on: ubuntu-latest 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
         with:
           fetch-depth: 0
           fetch-tags: true
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         id: setup-python
         with:
           python-version: '3.12'
       - name: Set up cache
-        uses: actions/cache@v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         id: cached-poetry-dependencies
         with:
           path: ./.venv
diff --git a/poetry.lock b/poetry.lock
index 47ca78f..7104a4d 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -418,4 +418,4 @@ utils = ["ecs-logging", "pyyaml", "rich", "structlog", "tomli", "typer"]
 [metadata]
 lock-version = "2.1"
 python-versions = ">=3.12"
-content-hash = "a561ad02cbf90a3be62bf15b87619b9a10f4ca8a414b97d9f6883f4107ca9b8f"
+content-hash = "ef2d617905de67ff5af4cd8cd2348672b82273d80c0461ef56002a5789d24aa5"
diff --git a/pyproject.toml b/pyproject.toml
index cac37d6..f8696ae 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -36,10 +36,10 @@ pyyaml = {version = "^6.0.2", optional = true}
 tomli = {version = "^2.0.2", optional = true}
 
 [tool.poetry.group.dev.dependencies]
-ruff = "^0.6"
-pytest = "^8.3"
-typing-extensions = "^4.12"
-pyright = "^1.1.381"
+ruff = "0.6.9"
+pytest = "8.3.4"
+typing-extensions = "4.12.2"
+pyright = "1.1.391"
 
 [tool.poetry.extras]
 utils = ["typer", "structlog", "ecs-logging", "rich", "pyyaml", "tomli"]