Merge pull request #244 from sir-gon/develop

Develop

Author: sir-gon

.github/workflows/dotnet-coverage.yml

@@ -35,6 +35,6 @@ jobs:
       - name: Test
         run: dotnet test --no-build --verbosity normal
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24
+        uses: codecov/codecov-action@39a2af19d997be74586469d4062e173ecae614f6
         with:
           token: ${{ secrets.CODECOV_TOKEN }}

.github/workflows/gitleaks.yml

@@ -1,5 +1,4 @@
 ---
-
 name: gitleaks
 
 on: # yamllint disable-line rule:truthy
@@ -22,10 +21,10 @@ jobs:
     name: gitleaks
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           fetch-depth: 0
-      - uses: gitleaks/gitleaks-action@v2
+      - uses: gitleaks/gitleaks-action@ff98106e4c7b2bc287b24eaf42907196329070c7
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           # Only required for Organizations, not personal accounts.

.github/workflows/snyk-code.yml

@@ -27,7 +27,7 @@ jobs:
       - name: Restore dependencies
         run: dotnet restore algorithm_exercises_csharp.sln
       - name: Run Snyk to check for vulnerabilities
-        uses: snyk/actions/dotnet@b98d498629f1c368650224d6d212bf7dfa89e4bf
+        uses: snyk/actions/dotnet@86b1cee1b8e110a78d528b3e1328a80e218111d2
         continue-on-error: true # To make sure that SARIF upload gets called
         env:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}