chore(deps): pin dependencies (#40)

Author: ematipico

.github/workflows/dependabot-pr.yml

@@ -11,7 +11,7 @@ jobs:
       dependency-names: ${{ steps.dependabot-metadata.outputs.dependency-names }}
     steps:
       - id: dependabot-metadata
-        uses: dependabot/fetch-metadata@v2
+        uses: dependabot/fetch-metadata@08eff52bf64351f401fb50d4972fa95b9f2c2d1b # v2
 
   biome-update:
     needs: dependabot-metadata

.github/workflows/update.yml

@@ -12,11 +12,11 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
 
       - name: update tags & commits
         run: node .github/workflows/update.js