#1966 chore: pin GitHub Actions versions to commit hashes
Pull request opened by
WillDaSilva
This will help prevent attacks such as
this one.
Dependabot is able to update these versions automatically, and it will preserve the readable version comments.
I'm aware this PR updates the version of the compromised GitHub Action mentioned in the post linked above. That's fine because Actions are disabled on this repository until we sort that out.
Closes
#1965
meltano/hub