chore(deps): pin dependencies (#144)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/rclone-action.yml

@@ -20,7 +20,7 @@ jobs:
       remote_path: "r2:r2-store/src"
     steps:
       - name: "⤵️ Check out code from GitHub"
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: "⏫ Run rclone/r2-store"
         uses: z-shell/.github/actions/rclone@v1
         with:

.github/workflows/win-install.yml

@@ -35,7 +35,7 @@ jobs:
           git config --global --add safe.directory /cygdrive/d/a/zi-src/zi-src
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: 🪟 Dependencies (Windows)
-        uses: egor-tensin/setup-cygwin@v4
+        uses: egor-tensin/setup-cygwin@d2c752bab416d4b0662591bd366fc2686297c82d # v4
         with:
           platform: x64
           packages: curl git zsh