chore(deps): pin dependencies

Author: renovate[bot]

.github/workflows/release-please.yml

@@ -66,13 +66,13 @@ jobs:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@master
+        uses: docker/setup-qemu-action@f8607cc714a3191ccc4468d6004a37d0e5a9419a # master
         with:
           platforms: all
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@master
+        uses: docker/setup-buildx-action@35d5669990ec77242c5a5926b41381a3f26fa947 # master
 
       - name: Build
         uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
@@ -92,7 +92,7 @@ jobs:
 
 
       - name: Install cosign
-        uses: sigstore/cosign-installer@main
+        uses: sigstore/cosign-installer@b5e753ae2d39589c7b38850b463739151fc67f07 # main
         with:
           cosign-release: 'v1.13.0'
 
@@ -178,7 +178,7 @@ jobs:
           git commit -s -m "chore: released charts ${{ needs.release-please.outputs.release_tag_name }}"
 
       - name: Push changes
-        uses: ad-m/github-push-action@master
+        uses: ad-m/github-push-action@d30dc2d070765d7e509df00c34c5fa2dd636ff74 # master
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           branch: ${{ env.GITHUB_PAGES_BRANCH }}