From 70316653bddd55bb8e46fe0028bcb1fbc1ddfa5b Mon Sep 17 00:00:00 2001
From: hatisuka <74543106+hatisuka@users.noreply.github.com>
Date: Tue, 20 Oct 2026 11:34:45 +0900
Subject: [PATCH 1/2] =?UTF-8?q?chore(ci):=20action=20=E3=81=AE=20SHA=20?=
 =?UTF-8?q?=E5=9B=BA=E5=AE=9A=E3=83=BB=E6=A8=A9=E9=99=90=E3=81=AE=E6=98=8E?=
 =?UTF-8?q?=E7=A4=BA?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
---
 .github/workflows/pr.yml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 8f3c88c..850e879 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -2,13 +2,21 @@ name: PR check
 
 on: pull_request
 
+permissions:
+  contents: read
+
 jobs:
   danger:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write  # Danger が PR にコメントするため
+      issues: read  # Danger が PR の情報(ラベル等)を issues API で読むため
+      statuses: write  # Danger が結果をコミットステータスに付けるため
 
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Danger(SwiftLint)
-        uses: docker://ghcr.io/danger/danger-swift-with-swiftlint:3.8.0
+        uses: docker://ghcr.io/danger/danger-swift-with-swiftlint@sha256:2ad66810ba60c21eacae54e698e690ddd9fa61073253b19dc68dadc3b8f2a71b # 3.8.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

From 1a0df145e2c439143774c837f183ea463e8b36ea Mon Sep 17 00:00:00 2001
From: hatisuka <74543106+hatisuka@users.noreply.github.com>
Date: Tue, 20 Oct 2026 11:38:20 +0900
Subject: [PATCH 2/2] =?UTF-8?q?chore(ci):=20Dependabot=20=E3=81=A7=20workf?=
 =?UTF-8?q?low=20=E3=81=AE=20action=20=E3=82=92=E6=9B=B4=E6=96=B0=E3=81=99?=
 =?UTF-8?q?=E3=82=8B?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
---
 .github/dependabot.yml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..da059f2
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,16 @@
+version: 2
+updates:
+  # workflow の action（SHA 固定）を更新する。SHA と末尾の # vX.Y.Z コメントを合わせて書き換えた PR が作られる
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "10:00"
+      timezone: "Asia/Tokyo"
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+    commit-message:
+      prefix: "chore(deps)"