ci(github-actions): Pin dependencies (#72)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: David Schach <636977+dschach@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/LOCAL-dependabot-approve-and-auto-merge.yml

@@ -10,11 +10,11 @@ jobs:
     steps:
       # Checkout the source code
       - name: 'Checkout source code'
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - name: 'Fetch Dependabot metadata'
         id: dependabot-fetch
-        uses: dependabot/fetch-metadata@v1
+        uses: dependabot/fetch-metadata@c9c4182bf1b97f5224aee3906fd373f6b61b4526 # v1
         with:
           github-token: '${{ secrets.GITHUB_TOKEN }}'
 
@@ -51,7 +51,7 @@ jobs:
     steps:
       - name: 'Fetch Dependabot metadata'
         id: dependabot
-        uses: dependabot/fetch-metadata@v1
+        uses: dependabot/fetch-metadata@c9c4182bf1b97f5224aee3906fd373f6b61b4526 # v1
         with:
           github-token: '${{ secrets.GITHUB_TOKEN }}'
 

.github/workflows/apex.yml

@@ -25,7 +25,7 @@ jobs:
     steps:
       # Checkout the source code
       - name: 'Checkout source code'
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       # Install Salesforce CLI
       - name: 'Install Salesforce sfdx CLI'
@@ -75,7 +75,7 @@ jobs:
 
       # Upload code coverage to Codecov.io
       - name: 'Upload code coverage for Apex to Codecov.io'
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3
         with:
           flags: Apex
           token: ${{ secrets.codecov-token }}

.github/workflows/lint-lwc.yml

@@ -14,16 +14,16 @@ jobs:
     steps:
       # Checkout the source code
       - name: 'Checkout source code'
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       # Install Volta to enforce proper node and package manager versions
       - name: 'Install Volta'
-        uses: volta-cli/action@v4
+        uses: volta-cli/action@d253558a6e356722728a10e9a469190de21a83ef # v4
 
       # Cache node_modules to speed up the process
       - name: 'Restore node_modules cache'
         id: cache-npm
-        uses: actions/cache@v3
+        uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
         with:
           path: node_modules
           key: npm-${{ hashFiles('**/package-lock.json') }}
@@ -46,7 +46,7 @@ jobs:
 
       # Upload code coverage data
       - name: 'Upload code coverage for LWC to Codecov.io'
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3
         with:
           flags: LWC
           token: ${{ secrets.CODECOV_TOKEN }}${{ secrets.codecov-token }}

.github/workflows/prettier-verify.yml

@@ -17,7 +17,7 @@ jobs:
     steps:
       # Checkout the source code
       - name: 'Checkout source code'
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       # Install npm dependencies for Prettier
       - name: 'Install Dependencies'

.github/workflows/release-please.yml

@@ -21,7 +21,7 @@ jobs:
     name: Release Please
     runs-on: ubuntu-latest
     steps:
-      - uses: google-github-actions/release-please-action@v3
+      - uses: google-github-actions/release-please-action@db8f2c60ee802b3748b512940dde88eabd7b7e01 # v3
         with:
           command: manifest
           token: ${{ secrets.release-token }}