Pin GitHub Actions to commit SHAs with version tag comments

Agent-Logs-Url: https://github.com/cryptomator/cryptomator.github.io/sessions/a052be38-dc00-472d-947a-faa890a6b0e7

Co-authored-by: infeo <9036915+infeo@users.noreply.github.com>

Author: Copilot

.github/workflows/gh-pages.yml

@@ -9,17 +9,17 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
       with:
         submodules: true
     - name: Setup Pages
-      uses: actions/configure-pages@v5
+      uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5.0.0
     - name: Setup Hugo
-      uses: peaceiris/actions-hugo@v3
+      uses: peaceiris/actions-hugo@75d2e84710de30f6ff7268e08f310b60ef14033f # v3.0.0
       with:
         hugo-version: '0.148.1'
         extended: true
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version: 22
         cache: 'npm'
@@ -38,12 +38,12 @@ jobs:
     - name: Add robots.txt for staging
       run: 'echo -e "User-agent: *\nDisallow: /" > public/staging/robots.txt'
     - name: Upload Prod Pages artifact
-      uses: actions/upload-pages-artifact@v3
+      uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3.0.1
       with:
         name: prod-site
         path: ./public/prod
     - name: Upload Staging artifacts
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
       with:
         name: staging-site
         path: ./public/staging
@@ -60,7 +60,7 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4 # or specific "vX.X.X" version tag for this action
+        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5
         with:
           artifact_name: prod-site
     environment: # Deploy to the github-pages environment
@@ -75,12 +75,12 @@ jobs:
     needs: [build]
     steps:
       - name: Download build
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: staging-site
           path: ./public
       - name: Deploy to Staging Repository
-        uses: peaceiris/actions-gh-pages@v3
+        uses: peaceiris/actions-gh-pages@373f7f263a76c20808c831209c920827a82a2847 # v3.9.3
         with:
           personal_token: ${{ secrets.CRYPTOBOT_DEPLOY_STAGING_WEBSITE }}
           external_repository: cryptomator/staging.cryptomator.github.io