From 30b3009ed52207a2f62042619618ed17bc764dc1 Mon Sep 17 00:00:00 2001
From: Wilmer Arambula <terabytesoftw@gmail.com>
Date: Sat, 31 Oct 2026 14:34:30 -0300
Subject: [PATCH] chore: re-pin `yii2-framework/actions` reusable workflows to
 the `v2.0.1` release commit.

---
 .github/dependabot.yml         | 13 +++++++++++++
 .github/workflows/quality.yml  |  2 +-
 .github/workflows/security.yml |  2 +-
 3 files changed, 15 insertions(+), 2 deletions(-)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..8238403
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,13 @@
+---
+version: 2
+updates:
+  # Maintain dependencies for GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    cooldown:
+      default-days: 7
+    groups:
+      github-actions:
+        patterns: ["*"]
diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
index 8b3d9e6..d786f34 100644
--- a/.github/workflows/quality.yml
+++ b/.github/workflows/quality.yml
@@ -10,7 +10,7 @@ permissions:
 
 jobs:
   quality:
-    uses: yii2-framework/actions/.github/workflows/quality.yml@e02758a41a2a811fb3e706735192979171b2260d # v2.0.1
+    uses: yii2-framework/actions/.github/workflows/quality.yml@f0e06ea5cc965cff4431177d448add7b7c98668b # v2.0.1
     permissions:
       contents: read
     with:
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 8d212d1..2671454 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -10,7 +10,7 @@ permissions:
 
 jobs:
   security:
-    uses: yii2-framework/actions/.github/workflows/security.yml@e02758a41a2a811fb3e706735192979171b2260d # v2.0.1
+    uses: yii2-framework/actions/.github/workflows/security.yml@f0e06ea5cc965cff4431177d448add7b7c98668b # v2.0.1
     permissions:
       contents: read
     with: