From bce36631574161cb8b954ed36b0130f20e79e08c Mon Sep 17 00:00:00 2001
From: Paul Beusterien <paulbeusterien@google.com>
Date: Fri, 12 Jun 2026 16:23:29 -0700
Subject: [PATCH 1/2] ci: Pin GitHub Actions workflows to hashes to avoid
 Node.js deprecation warnings

---
 .github/workflows/app_check_core.yml | 8 ++++----
 .github/workflows/check.yml          | 4 ++--
 .github/workflows/spm.yml            | 4 ++--
 3 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/app_check_core.yml b/.github/workflows/app_check_core.yml
index f28b90d0..ee469302 100644
--- a/.github/workflows/app_check_core.yml
+++ b/.github/workflows/app_check_core.yml
@@ -24,8 +24,8 @@ jobs:
             xcode: Xcode_26.2
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v3
-    - uses: ruby/setup-ruby@v1
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+    - uses: ruby/setup-ruby@354a1ad156761f5ee2b7b13fa8e09943a5e8d252 # v1
     - name: Setup Scripts Directory
       run: ./setup-scripts.sh
     - name: Setup Bundler
@@ -49,8 +49,8 @@ jobs:
   catalyst:
     runs-on: macos-latest
     steps:
-    - uses: actions/checkout@v3
-    - uses: ruby/setup-ruby@v1
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+    - uses: ruby/setup-ruby@354a1ad156761f5ee2b7b13fa8e09943a5e8d252 # v1
     - name: Setup Scripts Directory
       run: ./setup-scripts.sh
     - name: Setup Bundler
diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index 63399cee..8209065c 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -16,10 +16,10 @@ jobs:
     env:
       MINT_PATH: ${{ github.workspace }}/mint
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
     - name: Cache Mint packages
-      uses: actions/cache@v3
+      uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
       with:
         path: ${{ env.MINT_PATH }}
         key: ${{ runner.os }}-mint-${{ hashFiles('**/Mintfile') }}
diff --git a/.github/workflows/spm.yml b/.github/workflows/spm.yml
index 6818b0ea..8e42703d 100644
--- a/.github/workflows/spm.yml
+++ b/.github/workflows/spm.yml
@@ -23,8 +23,8 @@ jobs:
             platform: iOS
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v3
-    - uses: ruby/setup-ruby@v1
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+    - uses: ruby/setup-ruby@354a1ad156761f5ee2b7b13fa8e09943a5e8d252 # v1
     - name: Setup Scripts Directory
       run: ./setup-scripts.sh
     - name: Xcode

From 739e793f61faa59e7d40f47c0c3c3cb07a3f61db Mon Sep 17 00:00:00 2001
From: Paul Beusterien <paulbeusterien@google.com>
Date: Fri, 12 Jun 2026 16:40:00 -0700
Subject: [PATCH 2/2] ci: Upgrade setup-ruby and retry actions to versions
 supporting Node.js 24

---
 .github/workflows/app_check_core.yml | 6 +++---
 .github/workflows/spm.yml            | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/app_check_core.yml b/.github/workflows/app_check_core.yml
index ee469302..cd81a2fb 100644
--- a/.github/workflows/app_check_core.yml
+++ b/.github/workflows/app_check_core.yml
@@ -25,7 +25,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
     - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-    - uses: ruby/setup-ruby@354a1ad156761f5ee2b7b13fa8e09943a5e8d252 # v1
+    - uses: ruby/setup-ruby@89f90524b88a01fe6e0b732220432cc6142926af # v1.313.0
     - name: Setup Scripts Directory
       run: ./setup-scripts.sh
     - name: Setup Bundler
@@ -34,7 +34,7 @@ jobs:
       run: sudo xcode-select -s /Applications/${{ matrix.xcode }}.app/Contents/Developer
     - name: Install simulators in case they are missing.
       if: contains(matrix.target, 'macos') == false
-      uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3
+      uses: nick-fields/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 # v4.0.0
       with:
         timeout_minutes: 15
         max_attempts: 5
@@ -50,7 +50,7 @@ jobs:
     runs-on: macos-latest
     steps:
     - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-    - uses: ruby/setup-ruby@354a1ad156761f5ee2b7b13fa8e09943a5e8d252 # v1
+    - uses: ruby/setup-ruby@89f90524b88a01fe6e0b732220432cc6142926af # v1.313.0
     - name: Setup Scripts Directory
       run: ./setup-scripts.sh
     - name: Setup Bundler
diff --git a/.github/workflows/spm.yml b/.github/workflows/spm.yml
index 8e42703d..53f9aa47 100644
--- a/.github/workflows/spm.yml
+++ b/.github/workflows/spm.yml
@@ -24,7 +24,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
     - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-    - uses: ruby/setup-ruby@354a1ad156761f5ee2b7b13fa8e09943a5e8d252 # v1
+    - uses: ruby/setup-ruby@89f90524b88a01fe6e0b732220432cc6142926af # v1.313.0
     - name: Setup Scripts Directory
       run: ./setup-scripts.sh
     - name: Xcode