chore: use pinned dependencies for github-actions #525

	# this workflow runs the remote validate bake target from docker/docs
	# to check if yaml reference docs used in this repo are valid
	name: docs-upstream

	# Default to 'contents: read', which grants actions to read commits.
	#
	# If any permission is set, any permission not included in the list is
	# implicitly set to "none".
	#
	# see https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
	permissions:
	contents: read

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	on:
	push:
	branches:
	- 'main'
	- 'v[0-9]*'
	paths:
	- '.github/workflows/docs-upstream.yml'
	- 'docs/**'
	pull_request:
	paths:
	- '.github/workflows/docs-upstream.yml'
	- 'docs/**'

	jobs:
	docs-yaml:
	runs-on: ubuntu-latest
	steps:
	-
	name: Checkout
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # tag=v4.2.2
	-
	name: Upload reference YAML docs
	uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # tag=v4.6.2
	with:
	name: docs-yaml
	path: docs/reference
	retention-days: 1

	validate:
	uses: docker/docs/.github/workflows/validate-upstream.yml@main
	needs:
	- docs-yaml
	with:
	module-name: docker/compose

Provide feedback