From 60ab523cb1524645c707ce8cc837aa75eb400787 Mon Sep 17 00:00:00 2001
From: Mrugesh Mohapatra <1884376+raisedadead@users.noreply.github.com>
Date: Thu, 19 Feb 2026 21:43:18 +0530
Subject: [PATCH] fix(GHA): pin actions and concurrency (#65960)

---
 .github/workflows/deploy-api.yml          | 4 ++++
 .github/workflows/deploy-client.yml       | 4 ++++
 .github/workflows/docker-docr-cleanup.yml | 2 +-
 .github/workflows/docker-docr.yml         | 2 +-
 4 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/deploy-api.yml b/.github/workflows/deploy-api.yml
index 03ce818d508..2a9ef55da50 100644
--- a/.github/workflows/deploy-api.yml
+++ b/.github/workflows/deploy-api.yml
@@ -16,6 +16,10 @@ on:
         type: boolean
         default: false
 
+concurrency:
+  group: deploy-api-${{ github.ref_name }}
+  cancel-in-progress: false
+
 jobs:
   setup-jobs:
     name: Setup Jobs
diff --git a/.github/workflows/deploy-client.yml b/.github/workflows/deploy-client.yml
index 51f7a7647d9..f5f927e454f 100644
--- a/.github/workflows/deploy-client.yml
+++ b/.github/workflows/deploy-client.yml
@@ -24,6 +24,10 @@ on:
         type: boolean
         default: false
 
+concurrency:
+  group: deploy-client-${{ github.ref_name }}
+  cancel-in-progress: false
+
 jobs:
   setup-jobs:
     name: Setup Jobs
diff --git a/.github/workflows/docker-docr-cleanup.yml b/.github/workflows/docker-docr-cleanup.yml
index 15f2f5e88ce..769c74d627c 100644
--- a/.github/workflows/docker-docr-cleanup.yml
+++ b/.github/workflows/docker-docr-cleanup.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Install doctl
-        uses: digitalocean/action-doctl@v2
+        uses: digitalocean/action-doctl@135ac0aa0eed4437d547c6f12c364d3006b42824 # v2
         with:
           token: ${{ secrets.DIGITALOCEAN_ACCESS_TOKEN }}
 
diff --git a/.github/workflows/docker-docr.yml b/.github/workflows/docker-docr.yml
index 834495a8080..a305ed09689 100644
--- a/.github/workflows/docker-docr.yml
+++ b/.github/workflows/docker-docr.yml
@@ -65,7 +65,7 @@ jobs:
         uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
 
       - name: Install doctl
-        uses: digitalocean/action-doctl@v2
+        uses: digitalocean/action-doctl@135ac0aa0eed4437d547c6f12c364d3006b42824 # v2
         with:
           token: ${{ secrets.DIGITALOCEAN_ACCESS_TOKEN }}