From ee21c20e1f4b4bb951c27acd5bd51a7b1a6b08a0 Mon Sep 17 00:00:00 2001
From: Kurata Sayuri <MagicalSayuri@gmail.com>
Date: Tue, 16 Jun 2026 20:52:06 +0000
Subject: [PATCH] chore: update actions/checkout and dependencies in workflows
 for consistency

---
 .github/workflows/release.yml  | 11 ++++++++---
 .github/workflows/validate.yml | 10 ++++++----
 2 files changed, 14 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a577157..ba8ed9d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -13,7 +13,9 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
 
       - name: Validate version format
         run: |
@@ -35,13 +37,15 @@ jobs:
             custom_components/echonet_lite/manifest.json
 
       - name: Commit and tag
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"
           git add custom_components/echonet_lite/manifest.json
           git commit -m "Release v${{ inputs.version }}"
           git tag "v${{ inputs.version }}"
-          git push origin HEAD --tags
+          git push "https://x-access-token:${GITHUB_TOKEN}@github.com/${{ github.repository }}.git" HEAD --tags
 
       - name: ZIP echonet_lite Dir
         run: |
@@ -49,8 +53,9 @@ jobs:
           zip echonet_lite.zip -r ./
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v3
+        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
         with:
           tag_name: "v${{ inputs.version }}"
           generate_release_notes: true
+          prerelease: true
           files: ${{ github.workspace }}/custom_components/echonet_lite/echonet_lite.zip
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index d3d10c2..9c055a8 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -5,15 +5,17 @@ on:
   pull_request:
   workflow_dispatch:
   schedule:
-    - cron: '0 0 * * *'
+    - cron: "0 0 * * *"
 jobs:
   validation:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
       - name: HACS validation
-        uses: hacs/action@main
+        uses: hacs/action@1ebf01c408f29afcb6406bd431bc98fd8cbb15aa # main
         with:
           category: integration
       - name: Hassfest validation
-        uses: home-assistant/actions/hassfest@master
+        uses: home-assistant/actions/hassfest@e91ad1948e57189485b9c1ad608af0c303946f89 # master