chore(deps): pin dependencies (#2249)

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>

Author: renovate-sh-app[bot]

.github/workflows/check-docs.yml

@@ -17,10 +17,10 @@ jobs:
   check-docs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
 
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
         with:
           go-version: '1.21'
 

.github/workflows/generate-binaries.yml

@@ -17,7 +17,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
         with:
           ref: ${{ github.event.release.tag_name || github.event.inputs.tag_name }}
           fetch-depth: 0

.github/workflows/publish-technical-documentation-release.yml

@@ -26,7 +26,7 @@ jobs:
         with:
           fetch-depth: 0
           persist-credentials: 'false'
-      - uses: grafana/writers-toolkit/publish-technical-documentation-release@publish-technical-documentation-release/v2 # zizmor: ignore[unpinned-uses]
+      - uses: grafana/writers-toolkit/publish-technical-documentation-release@8cc658b604c6e05c275af30163a1c7728dfe19b2 # publish-technical-documentation-release/v2 # zizmor: ignore[unpinned-uses]
         with:
           release_tag_regexp: '^v(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$'
           release_branch_regexp: '^release-(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$'

.github/workflows/pull_request.yml

@@ -35,7 +35,7 @@ jobs:
       - name: Run verification and unit tests
         run: make docker-generate verify cov-exclude-generated
       - id: get-codecov-token
-        uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.2.1
+        uses: grafana/shared-workflows/actions/get-vault-secrets@9f37f656e063f0ad0b0bfc38d49894b57d363936 # get-vault-secrets/v1.2.1
         continue-on-error: true
         with:
           # Secrets placed in the ci/repo/grafana/beyla/codecov path in Vault

.github/workflows/pull_request_integration_tests.yml

@@ -96,7 +96,7 @@ jobs:
         run: make itest-coverage-data
 
       - id: get-codecov-token
-        uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.2.1
+        uses: grafana/shared-workflows/actions/get-vault-secrets@9f37f656e063f0ad0b0bfc38d49894b57d363936 # get-vault-secrets/v1.2.1
         continue-on-error: true
         with:
           # Secrets placed in the ci/repo/grafana/beyla/codecov path in Vault

.github/workflows/pull_request_integration_tests_arm.yml

@@ -48,7 +48,7 @@ jobs:
             testoutput/*.log
             testoutput/kind
       - id: get-codecov-token
-        uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.2.1
+        uses: grafana/shared-workflows/actions/get-vault-secrets@9f37f656e063f0ad0b0bfc38d49894b57d363936 # get-vault-secrets/v1.2.1
         continue-on-error: true
         with:
           # Secrets placed in the ci/repo/grafana/beyla/codecov path in Vault

.github/workflows/pull_request_k8s_integration_tests.yml

@@ -96,7 +96,7 @@ jobs:
         run: make itest-coverage-data
 
       - id: get-codecov-token
-        uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.2.1
+        uses: grafana/shared-workflows/actions/get-vault-secrets@9f37f656e063f0ad0b0bfc38d49894b57d363936 # get-vault-secrets/v1.2.1
         continue-on-error: true
         with:
           # Secrets placed in the ci/repo/grafana/beyla/codecov path in Vault

.github/workflows/pull_request_oats_test.yml

@@ -69,7 +69,7 @@ jobs:
         run: make itest-coverage-data
 
       - id: get-codecov-token
-        uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.2.1
+        uses: grafana/shared-workflows/actions/get-vault-secrets@9f37f656e063f0ad0b0bfc38d49894b57d363936 # get-vault-secrets/v1.2.1
         continue-on-error: true
         with:
           # Secrets placed in the ci/repo/grafana/beyla/codecov path in Vault

.github/workflows/release-notes.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
         with:
           persist-credentials: 'false'
           fetch-depth: 0

.github/workflows/restart-noteldemo.yml

@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - id: get-vault-secrets
-        uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.2.1
+        uses: grafana/shared-workflows/actions/get-vault-secrets@9f37f656e063f0ad0b0bfc38d49894b57d363936 # get-vault-secrets/v1.2.1
         with:
           vault_instance: ops
           export_env: false