chore: bump action + version hash

Author: Superkooka

.github/workflows/code-style.yaml

@@ -10,16 +10,16 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
 
       - name: Set up JDK 21
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #v5.2.0
         with:
           java-version: "21"
           distribution: "temurin"
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v4
+        uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c #v5.0.2
 
       - name: Run ktlint check
         run: ./gradlew ktlintCheck

.github/workflows/docker-publish.yaml

@@ -18,16 +18,16 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
 
       - name: Set up Java 21
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #v5.2.0
         with:
           java-version: '21'
           distribution: 'temurin'
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v4
+        uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c #v5.0.2
         with:
           cache-read-only: false
 
@@ -40,7 +40,7 @@ jobs:
           echo "image=${IMAGE,,}" >> $GITHUB_OUTPUT   # lowercase
 
       - name: Log in to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 #v4.0.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}

.github/workflows/helm-publish.yaml

@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
 
       - name: Extract version from tag
         id: meta
@@ -30,7 +30,7 @@ jobs:
           echo "oci_repo=oci://${{ env.REGISTRY }}/${OWNER,,}/charts" >> $GITHUB_OUTPUT
 
       - name: Set up Helm
-        uses: azure/setup-helm@v4
+        uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 #v4.3.1
 
       - name: Log in to GitHub Container Registry (Helm OCI)
         run: |
@@ -68,7 +68,7 @@ jobs:
             > /tmp/all-in-one.yaml
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe #2.6.1
         with:
           tag_name: ${{ steps.meta.outputs.tag }}
           name: "Chart ${{ steps.meta.outputs.version }}"

.github/workflows/renovate.yaml

@@ -10,13 +10,8 @@ jobs:
     name: Renovate
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v46.1.5
-        with:
-          configurationFile: renovate.json
+        uses: renovatebot/github-action@abd08c7549b2a864af5df4a2e369c43f035a6a9d #v46.1.5
         env:
           RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}