fix: pin actions/cache to SHA for security

IWANABETHATGUY · claude · IWANABETHATGUY · commit 050be8338383 · 2026-03-26T22:33:53.000+08:00
Co-Authored-By: Claude Opus 4.6 (1M context) &lt;noreply@anthropic.com&gt;
diff --git a/.github/workflows/reusable-cargo-test.yml b/.github/workflows/reusable-cargo-test.yml
@@ -52,7 +52,7 @@ jobs:
           INSTA_UPDATE: no
 
       - name: Cache esbuild snapshots
-        uses: actions/cache@v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: scripts/tmp/esbuild-tests/snapshots
           key: esbuild-snapshots-${{ hashFiles('scripts/src/esbuild-tests/urls.ts') }}
