From bfd19e2ad30ae839ec2aaaaafe4115ae733fba4f Mon Sep 17 00:00:00 2001
From: Horst Gutmann <horst.gutmann@grafana.com>
Date: Thu, 1 Feb 2024 11:39:00 +0100
Subject: [PATCH] chore: Update action dependencies

---
 actions/get-vault-secrets/action.yaml     | 6 ++++--
 actions/trigger-argo-workflow/action.yaml | 9 ++++++---
 2 files changed, 10 insertions(+), 5 deletions(-)

diff --git a/actions/get-vault-secrets/action.yaml b/actions/get-vault-secrets/action.yaml
index d5ad9ed8..15281c5c 100644
--- a/actions/get-vault-secrets/action.yaml
+++ b/actions/get-vault-secrets/action.yaml
@@ -37,7 +37,8 @@ runs:
         echo "Invalid value for vault_instance input: ${{ inputs.vault_instance }}. Must be 'dev' or 'ops'."
         exit 1
     - id: vault-iap-auth
-      uses: google-github-actions/auth@v1
+      # v2.1.0
+      uses: google-github-actions/auth@5a50e581162a13f4baa8916d01180d2acbc04363
       with:
         # Note that these aren't secrets, login is secured through Github's OIDC integrations with GCP and Vault.
         # Get with:
@@ -65,7 +66,8 @@ runs:
       # Get the secrets
     - name: Import Secrets
       id: import-secrets
-      uses: hashicorp/vault-action@v2
+      # v2.7.5
+      uses: hashicorp/vault-action@e3d5714d59e151ca80233142880b9da9d983a48c
       with:
         url: "https://vault-github-actions.grafana-${{ inputs.vault_instance }}.net/"
         role: vault-github-actions
diff --git a/actions/trigger-argo-workflow/action.yaml b/actions/trigger-argo-workflow/action.yaml
index 63ebf224..079ac8d1 100644
--- a/actions/trigger-argo-workflow/action.yaml
+++ b/actions/trigger-argo-workflow/action.yaml
@@ -61,7 +61,8 @@ runs:
 
     - name: Restore cache
       id: restore
-      uses: actions/cache/restore@v3.3.2
+      # v4.0.0
+      uses: actions/cache/restore@13aacd865c20de90d75de3b17ebe84f7a17d57d2
       with:
         path: ${{ github.workspace }}/bin
         key: argo-linux-amd64-${{ steps.argo-version.outputs.version }}
@@ -87,7 +88,8 @@ runs:
     - name: Save to cache
       id: save
       if: steps.gunzip.outcome == 'success'
-      uses: actions/cache/save@v3.3.2
+      # v4.0.0
+      uses: actions/cache/save@13aacd865c20de90d75de3b17ebe84f7a17d57d2
       with:
         path: ${{ github.workspace }}/bin
         key: ${{ steps.restore.outputs.cache-primary-key }}
@@ -98,7 +100,8 @@ runs:
         echo "${{ github.workspace }}/bin" >> $GITHUB_PATH
 
     - name: Setup go
-      uses: actions/setup-go@v4.1.0
+      # v5.0.0
+      uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
       with:
         check-latest: true
         cache-dependency-path: |