chore(deps): pin dependencies

Author: renovate[bot]

.github/workflows/auto_update.yml

@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
 
       - name: Update version in files
         run: |
@@ -40,7 +40,7 @@ jobs:
         env:
           ACCESS_TOKEN: ${{ secrets.YOSHI_CODE_BOT_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        uses: googleapis/code-suggester@v2
+        uses: googleapis/code-suggester@9222591646c050504e4a341ab8418cbfb5f619e1 # v2
         with:
           command: pr
           branch: 'auto-update/genai-toolbox-version-test'

.github/workflows/test-renovate.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Run Renovate in Dry Run mode
         env:
           LOG_LEVEL: '${{ github.event.inputs.log-level || ''debug'' }}'

.github/workflows/update-toolbox-version.yml

@@ -10,7 +10,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
 
       - name: Update version in files
         run: |
@@ -28,7 +28,7 @@ jobs:
           sed -i "s/_TOOLBOX_VERSION: '.*/_TOOLBOX_VERSION: '$NEW_VERSION_CLEAN'/" packages/toolbox-llamaindex/integration.cloudbuild.yaml
           
       - name: 'Create Pull Request'
-        uses: 'peter-evans/create-pull-request@v6'
+        uses: 'peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c' # v6
         with:
           commit-message: 'chore(deps): update genai-toolbox version to ${{ github.event.client_payload.new_version }}'
           title: 'chore(deps): update genai-toolbox version to ${{ github.event.client_payload.new_version }}'