chore(deps): pin dependencies (#388)

Author: renovate[bot]

.github/actions/check/action.yml

@@ -37,7 +37,7 @@ runs:
 
     - name: Run contract tests v2
       if: ${{ inputs.flaky != 'true' }}
-      uses: launchdarkly/gh-actions/actions/contract-tests@contract-tests-v1
+      uses: launchdarkly/gh-actions/actions/contract-tests@5adb11fd6953e1bc35d9cf1fc1b4374c464e3a8b # contract-tests-v1
       with:
         test_service_port: 9000
         enable_persistence_tests: true
@@ -46,7 +46,7 @@ runs:
 
     - name: Run contract tests v3
       if: ${{ inputs.flaky != 'true' }}
-      uses: launchdarkly/gh-actions/actions/contract-tests@contract-tests-v1
+      uses: launchdarkly/gh-actions/actions/contract-tests@5adb11fd6953e1bc35d9cf1fc1b4374c464e3a8b # contract-tests-v1
       with:
         test_service_port: 9000
         enable_persistence_tests: true

.github/actions/publish-docs/action.yml

@@ -8,7 +8,7 @@ inputs:
 runs:
   using: composite
   steps:
-    - uses: launchdarkly/gh-actions/actions/publish-pages@publish-pages-v1.0.2
+    - uses: launchdarkly/gh-actions/actions/publish-pages@f87da03e3413ce472ac621025890774ce725e373 # publish-pages-v1.0.2
       name: 'Publish to Github pages'
       with:
         docs_path: docs/build/html/

.github/actions/publish/action.yml

@@ -8,7 +8,7 @@ inputs:
 runs:
   using: composite
   steps:
-    - uses: actions/download-artifact@v4
+    - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
       with:
         pattern: 'gems-*'
         merge-multiple: true

.github/workflows/build-gem.yml

@@ -23,9 +23,9 @@ jobs:
       FLAKY: ${{ startsWith(inputs.version, 'jruby') && 'true' || 'false' }}
 
     steps:
-      - uses: actions/checkout@v4.3.1
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
-      - uses: launchdarkly/gh-actions/actions/persistent-stores@persistent-stores-v0
+      - uses: launchdarkly/gh-actions/actions/persistent-stores@68e9b2f165f60934308f18e4b75623c30b905c38 # persistent-stores-v0
         with:
           redis: true
           consul: true
@@ -43,7 +43,7 @@ jobs:
       - name: Build gemspec
         run: gem build launchdarkly-server-sdk.gemspec --platform=$BUILD_PLATFORM
 
-      - uses: actions/upload-artifact@v4.6.2
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         if: ${{ inputs.upload-artifact }}
         with:
           name: gems-${{ inputs.version }}

.github/workflows/ci.yml

@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4.3.1
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - uses: ./.github/actions/setup
         with:
@@ -42,7 +42,7 @@ jobs:
         shell: powershell
 
     steps:
-      - uses: actions/checkout@v4.3.1
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - uses: ./.github/actions/setup
         with:

.github/workflows/lint-pr-title.yml

@@ -12,4 +12,4 @@ permissions:
 
 jobs:
   lint-pr-title:
-    uses: launchdarkly/gh-actions/.github/workflows/lint-pr-title.yml@main
+    uses: launchdarkly/gh-actions/.github/workflows/lint-pr-title.yml@2e6676d8c7ed1a59114d08faa22e3dbf085a1a64 # main

.github/workflows/manual-publish-docs.yml

@@ -10,7 +10,7 @@ jobs:
       contents: write # Needed in this case to write github pages.
 
     steps:
-      - uses: actions/checkout@v4.3.1
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - uses: ./.github/actions/setup
         with:

.github/workflows/manual-publish.yml

@@ -28,14 +28,14 @@ jobs:
       attestations: write # Needed for actions/attest.
 
     steps:
-      - uses: actions/checkout@v4.3.1
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - uses: ./.github/actions/setup
         with:
           version: "3.2"
           install-dependencies: false
 
-      - uses: launchdarkly/gh-actions/actions/release-secrets@release-secrets-v1.2.0
+      - uses: launchdarkly/gh-actions/actions/release-secrets@bbbbbda684f500766264e7fe327668094ba83d1c # release-secrets-v1.2.0
         name: "Get rubygems API key"
         if: ${{ format('{0}', inputs.dry_run) == 'false' }}
         with:
@@ -56,6 +56,6 @@ jobs:
 
       - name: Attest build provenance
         if: ${{ format('{0}', inputs.dry_run) == 'false' }}
-        uses: actions/attest@v4.1.0
+        uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
         with:
           subject-path: 'launchdarkly-server-sdk-*.gem'

.github/workflows/release-please.yml

@@ -45,14 +45,14 @@ jobs:
       attestations: write # Needed for actions/attest.
 
     steps:
-      - uses: actions/checkout@v4.3.1
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - uses: ./.github/actions/setup
         with:
           version: "3.2"
           install-dependencies: false
 
-      - uses: launchdarkly/gh-actions/actions/release-secrets@release-secrets-v1.2.0
+      - uses: launchdarkly/gh-actions/actions/release-secrets@bbbbbda684f500766264e7fe327668094ba83d1c # release-secrets-v1.2.0
         name: "Get rubygems API key"
         with:
           aws_assume_role: ${{ vars.AWS_ROLE_ARN }}
@@ -70,6 +70,6 @@ jobs:
           token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Attest build provenance
-        uses: actions/attest@v4.1.0
+        uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
         with:
           subject-path: 'launchdarkly-server-sdk-*.gem'

.github/workflows/stale.yml

@@ -11,4 +11,4 @@ permissions:
 
 jobs:
   sdk-close-stale:
-    uses: launchdarkly/gh-actions/.github/workflows/sdk-stale.yml@main
+    uses: launchdarkly/gh-actions/.github/workflows/sdk-stale.yml@2e6676d8c7ed1a59114d08faa22e3dbf085a1a64 # main