ci: pin docker action versions (v3 cached a broken SHA)

Author: vbcherepanov

.github/workflows/docker.yml

@@ -59,20 +59,20 @@ jobs:
           echo "minor=$(echo "$v" | cut -d. -f1-2)" >> "$GITHUB_OUTPUT"
 
       - name: Set up QEMU (for arm64 cross-build)
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v3.6.0
 
       - name: Set up Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v3.10.0
 
       - name: Login to ghcr
-        uses: docker/login-action@v3
+        uses: docker/login-action@v3.4.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build + push (amd64 + arm64)
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6.18.0
         with:
           context: .
           file: ./Dockerfile