chore: pin dependencies

Author: renovate[bot]

.github/workflows/add-to-triage.yml

@@ -14,6 +14,6 @@ on:
 
 jobs:
   add-to-triage:
-    uses: eslint/workflows/.github/workflows/add-to-triage.yml@main
+    uses: eslint/workflows/.github/workflows/add-to-triage.yml@3030377848e4c0b9c28a271b88a5c8c57359da68 # main
     secrets:
       project_bot_token: ${{ secrets.PROJECT_BOT_TOKEN }}

.github/workflows/ci.yml

@@ -16,7 +16,7 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: Install pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4
 
       - name: Set node
         uses: actions/setup-node@v6
@@ -48,7 +48,7 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: Install pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4
 
       - name: Set node ${{ matrix.node }}
         uses: actions/setup-node@v6

.github/workflows/release-please.yml

@@ -17,7 +17,7 @@ jobs:
       tag_name: ${{ steps.release.outputs.tag_name }}
       html_url: ${{ steps.release.outputs.html_url }}
     steps:
-      - uses: googleapis/release-please-action@v4
+      - uses: googleapis/release-please-action@16a9c90856f42705d54a6fda1823352bdc62cf38 # v4
         id: release
         with:
           token: ${{ secrets.WORKFLOW_PUSH_BOT_TOKEN }}
@@ -27,7 +27,7 @@ jobs:
     if: ${{ needs.release-please.outputs.releases_created == 'true' }}
     steps:
       - uses: actions/checkout@v6
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4
       - uses: actions/setup-node@v6
         with:
           node-version: lts/*

.github/workflows/stale.yml

@@ -10,6 +10,6 @@ permissions:
 
 jobs:
   stale:
-    uses: eslint/workflows/.github/workflows/stale.yml@main
+    uses: eslint/workflows/.github/workflows/stale.yml@3030377848e4c0b9c28a271b88a5c8c57359da68 # main
     secrets:
       token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/update-readme.yml

@@ -8,6 +8,6 @@ on:
 
 jobs:
   update-readme:
-    uses: eslint/workflows/.github/workflows/update-readme.yml@main
+    uses: eslint/workflows/.github/workflows/update-readme.yml@3030377848e4c0b9c28a271b88a5c8c57359da68 # main
     secrets:
       workflow_push_bot_token: ${{ secrets.WORKFLOW_PUSH_BOT_TOKEN }}