chore: Specify the GitHub Actions by the commit hash

Author: AChep

.github/actions/build_android_baseline_profiles/action.yml

@@ -13,7 +13,7 @@ runs:
     - uses: ./.github/actions/prepare_kvm
     - name: "Generate baseline profiles"
       id: baseline-profiles
-      uses: reactivecircus/android-emulator-runner@v2
+      uses: reactivecircus/android-emulator-runner@b530d96654c385303d652368551fb075bc2f0b6b
       with:
         api-level: 30
         arch: x86_64
@@ -26,15 +26,15 @@ runs:
           adb pull /storage/emulated/0/Movies/ artifactsScreenRecording/ || true
           exit $RESULT
     - name: 'Upload baseline profile screen recordings'
-      uses: actions/upload-artifact@v5
+      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
       if: always()
       with:
         name: ${{ inputs.artifact-prefix }}baselineprofile-screen-recordings
         path: |
           artifactsScreenRecording/
         retention-days: 7
     - name: 'Upload baseline profile logs'
-      uses: actions/upload-artifact@v5
+      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
       if: always()
       with:
         name: ${{ inputs.artifact-prefix }}baselineprofile-logs

.github/actions/prepare_disk_space/action.yml

@@ -4,7 +4,7 @@ runs:
   steps:
     - name: "Delete unnecessary tools"
       if: ${{ env.ACTION_PREPARE_DISK_SPACE_COMPLETE != '1' }}
-      uses: jlumbroso/free-disk-space@v1.3.1
+      uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be
       with:
         tool-cache: false
         android: false

.github/actions/setup_gradle/action.yml

@@ -17,12 +17,12 @@ runs:
   steps:
     - name: "Setup JDK 21"
       id: setup-java
-      uses: actions/setup-java@v5
+      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
       with:
         distribution: ${{ inputs.java-distribution }}
         java-version: ${{ inputs.java-version }}
     - name: "Setup Gradle"
-      uses: gradle/actions/setup-gradle@v5
+      uses: gradle/actions/setup-gradle@f29f5a9d7b09a7c6b29859002d29d24e1674c884
       env:
         JAVA_HOME: ${{ steps.setup-java.outputs.path }}
       with:

.github/actions/setup_python/action.yml

@@ -3,6 +3,6 @@ runs:
   using: "composite"
   steps:
     - name: "Setup Python"
-      uses: actions/setup-python@v6
+      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
       with:
         python-version: '3.10'

.github/workflows/check_gradle_wrapper.yml

@@ -20,6 +20,6 @@ jobs:
     name: Check Gradle wrapper
     runs-on: ubuntu-slim
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
       - name: "Check Gradle wrapper"
-        uses: gradle/actions/wrapper-validation@v5
+        uses: gradle/actions/wrapper-validation@f29f5a9d7b09a7c6b29859002d29d24e1674c884

.github/workflows/check_jetifier.yml

@@ -14,7 +14,7 @@ jobs:
     name: Check Jetifier
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
       - uses: ./.github/actions/setup_gradle
       - name: "Check Jetifier"
         run: ./gradlew checkJetifier

.github/workflows/check_licenses.yml

@@ -20,7 +20,7 @@ jobs:
     name: Check Licenses
     runs-on: ubuntu-slim
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
       - uses: ./.github/actions/setup_gradle
       - name: "Check licenses"
         run: ./gradlew licensee
@@ -50,7 +50,7 @@ jobs:
           file_content="$(cat $file_path)"
           echo "paths=$file_content" >> "$GITHUB_OUTPUT"
       - name: "Upload results"
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         if: always()
         with:
           name: reports

.github/workflows/check_lint.yml

@@ -20,7 +20,7 @@ jobs:
     name: Check Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
       - uses: ./.github/actions/setup_gradle
         with:
           cache-write-only: ${{ inputs.cache-write-only || false }}
@@ -56,7 +56,7 @@ jobs:
           file_content="$(cat $file_path)"
           echo "paths=$file_content" >> "$GITHUB_OUTPUT"
       - name: "Upload results"
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         if: always()
         with:
           name: reports

.github/workflows/check_tests.yaml

@@ -19,7 +19,7 @@ jobs:
   check-desktop-tests:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
       - uses: ./.github/actions/setup_gradle
         with:
           cache-write-only: ${{ inputs.cache-write-only || false }}
@@ -34,7 +34,7 @@ jobs:
           - 30
           - 26
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
       - uses: ./.github/actions/setup_gradle
         with:
           cache-write-only: ${{ inputs.cache-write-only || false }}
@@ -48,7 +48,7 @@ jobs:
           build-flavor: "PlayStore"
       - name: "Run integration tests"
         id: baseline-profiles
-        uses: reactivecircus/android-emulator-runner@v2
+        uses: reactivecircus/android-emulator-runner@b530d96654c385303d652368551fb075bc2f0b6b
         with:
           api-level: ${{ matrix.api-level }}
           arch: x86_64
@@ -61,15 +61,15 @@ jobs:
             adb pull /storage/emulated/0/Movies/ artifactsScreenRecording/ || true
             exit $RESULT
       - name: 'Upload screen recordings'
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         if: always()
         with:
           name: android-${{ matrix.api-level }}-screen-recordings
           path: |
             artifactsScreenRecording/
           retention-days: 7
       - name: 'Upload logs'
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         if: always()
         with:
           name: android-${{ matrix.api-level }}-logs

.github/workflows/check_translations.yml

@@ -19,7 +19,7 @@ jobs:
     name: Check Translations
     runs-on: ubuntu-slim
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
       - run: pip install -r .github/check_translations.requirements.txt
       - name: "Check translations"
         run: |
@@ -31,7 +31,7 @@ jobs:
             --output proofread_report.json
       - name: "Upload report"
         if: always()
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         with:
           name: proofread-report
           path: proofread_report.json