From 2eec38101c558a6cadc713c338a0a70f9859a07c Mon Sep 17 00:00:00 2001
From: Jared Hatfield <jjhatf02@gmail.com>
Date: Wed, 24 Jun 2026 21:35:30 +0000
Subject: [PATCH] pin actions/delete-package-versions to SHA

---
 .github/workflows/docker-build-dev.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/docker-build-dev.yml b/.github/workflows/docker-build-dev.yml
index 930eed6..0150c4f 100644
--- a/.github/workflows/docker-build-dev.yml
+++ b/.github/workflows/docker-build-dev.yml
@@ -61,7 +61,7 @@ jobs:
         echo "PACKAGE_NAME_LC=${PACKAGE_NAME,,}" >> $GITHUB_ENV
 
     - name: Clean up untagged (dangling) docker images
-      uses: actions/delete-package-versions@v5
+      uses: actions/delete-package-versions@e5bc658cc4c965c472efe991f8beea3981499c55 # v5.0.0
       with:
         owner: ${{ github.repository_owner }}
         package-name: ${{ env.PACKAGE_NAME_LC }}-${{ matrix.tag }}-snapshot