chore(deps): pin dependencies

Author: renovate[bot]

.github/workflows/continuous-integration.yml

@@ -19,7 +19,7 @@ jobs:
         with:
           version: v0.8.15
       - name: Checkout code.
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Check formatting.
         run: earthly --ci +check-${{ matrix.language }}-formatting
   linting:
@@ -34,7 +34,7 @@ jobs:
         with:
           version: v0.8.15
       - name: Checkout code.
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Check linting.
         run: earthly --ci +check-${{ matrix.language }}-linting
   compile:
@@ -46,7 +46,7 @@ jobs:
         with:
           version: v0.8.15
       - name: Checkout code.
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Compile.
         run: earthly --ci +compile
   unit-test:
@@ -58,6 +58,6 @@ jobs:
         with:
           version: v0.8.15
       - name: Checkout code.
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Unit test.
         run: earthly --ci +unit-test

.github/workflows/conventional-commits.yml

@@ -16,7 +16,7 @@ jobs:
         with:
           version: v0.8.15
       - name: Checkout code.
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0

.github/workflows/git-history.yml

@@ -16,7 +16,7 @@ jobs:
         with:
           version: v0.8.15
       - name: Checkout code.
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0

.github/workflows/release-please.yml

@@ -14,6 +14,6 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - uses: googleapis/release-please-action@v4
+      - uses: googleapis/release-please-action@7987652d64b4581673a76e33ad5e98e3dd56832f # v4
         with:
           token: ${{ secrets.MY_RELEASE_PLEASE_TOKEN }}