From db2f3fb331d481d6020b8e61284e410bfb1cf21e Mon Sep 17 00:00:00 2001
From: Chojan Shang <psiace@apache.org>
Date: Thu, 22 Oct 2026 23:13:25 +0800
Subject: [PATCH] fix(ci): pin composite Action dependency to a full SHA

---
 action.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/action.yml b/action.yml
index 0133c37..0443350 100644
--- a/action.yml
+++ b/action.yml
@@ -67,7 +67,7 @@ outputs:
 runs:
   using: composite
   steps:
-    - uses: astral-sh/setup-uv@v10.2.0
+    - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
       with:
         version: '0.10.12'
     - name: Prepare the Landing runtime