From cf604c78c54866dfef1bf44c32c7d6f35caa2d1e Mon Sep 17 00:00:00 2001
From: Nate Bross <nate@brosstribe.com>
Date: Tue, 10 Nov 2026 17:12:05 -0600
Subject: [PATCH] fix(ci): pin ReportGenerator action to a valid commit

---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6f28bbf..b1d7bc2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -44,7 +44,7 @@ jobs:
 
       - name: Merge coverage reports
         if: ${{ always() && matrix.os == 'ubuntu-latest' }}
-        uses: danielpalme/ReportGenerator-GitHub-Action@5
+        uses: danielpalme/ReportGenerator-GitHub-Action@5f3701a41d14548c9b8e575a5c235230e515cbc0 # v5.6.0
         with:
           reports: tests/**/coverage.cobertura.xml
           targetdir: coverage