chore(ci): add version commenst to pinned GHA deps (#88)

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

2 files changed, 8 insertions, 16 deletions

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e501364..0e4d7c1 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -60,8 +60,7 @@ jobs:
 
     steps:
       - name: Checkout
-        # commit hash for version 7.0.0
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Setup MSVC
         # the 'hishamhm/gh-actions-lua' step requires msvc to build PuC Rio Lua
@@ -96,13 +95,11 @@ jobs:
       #     dir \".\\.dependencies\Dependencies.exe\"\n
       #     .\\.dependencies\\Dependencies.exe -help\n
 
-      - uses: luarocks/gh-actions-lua@6fff34a54b160acea12880a638eab0960507c1f5
-        # commit hash for unrelease commit past version v11; Lua 5.5 and Node fixes
+      - uses: luarocks/gh-actions-lua@6fff34a54b160acea12880a638eab0960507c1f5 # v11
         with:
           luaVersion: ${{ matrix.luaVersion }}
 
-      - uses: luarocks/gh-actions-luarocks@86ccbcad8c77b22e94c96a2a08632192e2bcd62b
-        # commit hash for unrelease commit past version v6; Node fixes
+      - uses: luarocks/gh-actions-luarocks@86ccbcad8c77b22e94c96a2a08632192e2bcd62b # v6
         with:
           luaRocksVersion: "3.13.0"
 
@@ -124,8 +121,7 @@ jobs:
     name: Run tests on FreeBSD
     steps:
       - name: Checkout
-        # commit hash for version 7.0.0
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Run tests inside FreeBSD VM
         uses: vmactions/freebsd-vm@v1
@@ -144,8 +140,7 @@ jobs:
     name: Run tests on OpenBSD
     steps:
       - name: Checkout
-        # commit hash for version 7.0.0
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Run tests inside OpenBSD VM
         uses: vmactions/openbsd-vm@v1
@@ -164,8 +159,7 @@ jobs:
     name: Run tests on NetBSD
     steps:
       - name: Checkout
-        # commit hash for version 7.0.0
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Run tests inside NetBSD VM
         uses: vmactions/netbsd-vm@v1
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 9d781cb..9127672 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -9,9 +9,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        # commit hash for version 7.0.0
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Luacheck
-        # commit hash for master commit Apr 20, 2026
-        uses: lunarmodules/luacheck@f47ad699b5aab8eba5494a2b63e26c24dbf486ce
+        uses: lunarmodules/luacheck@f47ad699b5aab8eba5494a2b63e26c24dbf486ce # v1.2.0