chore(ci): pin dependencies (#330)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/cicd.yml

@@ -22,7 +22,7 @@ jobs:
   all:
     if: github.run_id != 1
     name: Build & Tests
-    uses: dailydevops/pipelines/.github/workflows/build-dotnet-single.yml@1.2.28
+    uses: dailydevops/pipelines/.github/workflows/build-dotnet-single.yml@615742a7d420dfa5b5f87c279f119f1db055bb3b # 1.2.28
     with:
       dotnetLogging: ${{ inputs.dotnet-logging }}
       dotnetVersion: ${{ vars.NE_DOTNET_TARGETFRAMEWORKS }}

.github/workflows/cleanup-cache.yml

@@ -12,7 +12,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
         with:
           fetch-depth: 0
 

.github/workflows/publish-nuget.yml

@@ -18,7 +18,7 @@ jobs:
   nuget:
     name: Publish
     if: ${{ github.event.workflow_run.conclusion == 'success' && github.actor != 'dependabot[bot]' }}
-    uses: dailydevops/pipelines/.github/workflows/publish-nuget.yml@1.2.28
+    uses: dailydevops/pipelines/.github/workflows/publish-nuget.yml@615742a7d420dfa5b5f87c279f119f1db055bb3b # 1.2.28
     with:
       workflowName: ${{ github.event.workflow_run.name }}
       artifactPattern: release-packages-*

.github/workflows/update-license.yml

@@ -15,11 +15,11 @@ jobs:
     steps:
 
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
       with:
         fetch-depth: 0
 
-    - uses: FantasticFiasco/action-update-license-year@v3
+    - uses: FantasticFiasco/action-update-license-year@d837fc83ecb71196807bdf3854208f556e66f6ed # v3
       with:
         token: ${{ secrets.GITHUB_TOKEN }}
         prTitle: 'chore: Updated LICENSE'