Pin deps

Author: spoorcc

.github/workflows/build.yml

@@ -36,19 +36,19 @@ jobs:
 
       - name: Set up Ruby
         if: ${{ matrix.platform != 'windows-latest' }}
-        uses: ruby/setup-ruby@v1
+        uses: ruby/setup-ruby@d354de180d0c9e813cfddfcbdc079945d4be589b  #v1.275.0
         with:
-          ruby-version: 3.2   # or any version you need
+          ruby-version: 3.2
 
       - name: Install fpm
         if: ${{ matrix.platform != 'windows-latest' }}
         run: |
-          gem install --no-document fpm
+          gem install --no-document fpm --version 1.17.0
           fpm --version
 
       - name: Add msbuild to PATH
         if: ${{ matrix.platform == 'windows-latest' }}
-        uses: microsoft/setup-msbuild@v2
+        uses: microsoft/setup-msbuild@767f00a3f09872d96a0cb9fcd5e6a4ff33311330 # v2
       - name: Install WiX
         if: ${{ matrix.platform == 'windows-latest' }}
         run: |