chore(deps): pin dependencies

Author: renovate[bot]

.github/workflows/release-please.yml

@@ -66,13 +66,13 @@ jobs:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@master
+        uses: docker/setup-qemu-action@76c0984808678992dc9f24265d45acf8c8fc8a96 # master
         with:
           platforms: all
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@master
+        uses: docker/setup-buildx-action@ffb3193908564d14b099e8f6bbacbaea94ee2ac4 # master
 
       - name: Build
         uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
@@ -92,7 +92,7 @@ jobs:
 
 
       - name: Install cosign
-        uses: sigstore/cosign-installer@main
+        uses: sigstore/cosign-installer@b5e753ae2d39589c7b38850b463739151fc67f07 # main
         with:
           cosign-release: 'v1.13.0'
 
@@ -178,7 +178,7 @@ jobs:
           git commit -s -m "chore: released charts ${{ needs.release-please.outputs.release_tag_name }}"
 
       - name: Push changes
-        uses: ad-m/github-push-action@master
+        uses: ad-m/github-push-action@4cc74773234f74829a8c21bc4d69dd4be9cfa599 # master
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           branch: ${{ env.GITHUB_PAGES_BRANCH }}