chore(deps): pin dependencies

Author: renovate[bot]

.github/workflows/ci.yml

@@ -21,21 +21,21 @@ jobs:
     steps:
       - name: Get current PR
         id: pr
-        uses: 8BitJonny/gh-get-current-pr@4.0.0
+        uses: 8BitJonny/gh-get-current-pr@4056877062a1f3b624d5d4c2bedefa9cf51435c9 # 4.0.0
         with:
           filterOutClosed: true
           filterOutDraft: true
   build:
     needs: prepare_jobs
     name: dargstack rgen
-    uses: dargmuesli/github-actions/.github/workflows/dargstack-rgen.yml@2.7.0
+    uses: dargmuesli/github-actions/.github/workflows/dargstack-rgen.yml@4e6e3d3fa4b81be372036d8ac7b14638d27be045 # 2.7.0
     if: needs.prepare_jobs.outputs.pr_found == 'false' || github.event_name == 'pull_request'
     with:
       APT_PACKAGES: mkcert
   release-semantic:
     needs: build
     name: Semantic Release
-    uses: dargmuesli/github-actions/.github/workflows/release-semantic.yml@2.7.0
+    uses: dargmuesli/github-actions/.github/workflows/release-semantic.yml@4e6e3d3fa4b81be372036d8ac7b14638d27be045 # 2.7.0
     permissions:
       contents: write
     secrets:

.github/workflows/release-schedule.yml

@@ -11,7 +11,7 @@ on:
 jobs:
   release-schedule:
     name: "Release: Scheduled"
-    uses: dargmuesli/github-actions/.github/workflows/release-schedule.yml@2.7.0
+    uses: dargmuesli/github-actions/.github/workflows/release-schedule.yml@4e6e3d3fa4b81be372036d8ac7b14638d27be045 # 2.7.0
     secrets:
       PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
     with: