workflows: pin actions

.github/workflows/scheduled.yml

@@ -22,7 +22,7 @@ jobs:
  timeout-minutes: 20
  steps:
  - name: Set up Git repository
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
  with:
  fetch-depth: 0
  ref: ${{ github.event.pull_request.head.sha }}
@@ -42,7 +42,7 @@ jobs:
  bundle exec rake yard build
 
  - name: Upload pages artifact
- uses: actions/upload-pages-artifact@v3
+ uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
 
  deploy:
  needs: generate
@@ -60,7 +60,7 @@ jobs:
  steps:
  - name: Deploy to GitHub Pages
  id: deployment
- uses: actions/deploy-pages@v4
+ uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
 
  deploy-issue:
  name: Open/close deploy issue
@@ -98,4 +98,4 @@ jobs:
  if [ -n "$EXISTING_ISSUE" ]; then
  gh issue comment "$EXISTING_ISSUE" --repo "$REPO" --body "$(echo -e "$COMMENT_BODY")"
  gh issue close "$EXISTING_ISSUE" --repo "$REPO"
- fi
+ fi

.github/workflows/stale-issues.yml

@@ -32,7 +32,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Mark/Close Stale Issues and Pull Requests
- uses: actions/stale@v9
+ uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9
  with:
  repo-token: ${{ secrets.GITHUB_TOKEN }}
  days-before-stale: 21
@@ -57,7 +57,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Mark/Close Stale `bump-formula-pr` and `bump-cask-pr` Pull Requests
- uses: actions/stale@v9
+ uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9
  with:
  repo-token: ${{ secrets.GITHUB_TOKEN }}
  days-before-stale: 2

.github/workflows/tests.yml

@@ -14,7 +14,7 @@ jobs:
  runs-on: ubuntu-22.04
  steps:
  - name: Set up Git repository
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
 
  - name: Set up Homebrew
  id: set-up-homebrew