chore(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	pinDigest	-> 5a3ec84
actions/checkout	action	pinDigest	-> 11bd719
actions/labeler	action	pinDigest	-> ac9175f
actions/setup-java	action	pinDigest	-> c5195ef
actions/setup-node	action	pinDigest	-> 49933ea
actions/upload-artifact	action	pinDigest	-> ea165f8
aws-actions/configure-aws-credentials	action	pinDigest	-> e3dd6a4
docker/build-push-action	action	pinDigest	-> 2634353
docker/login-action	action	pinDigest	-> 184bdaa
docker/metadata-action	action	pinDigest	-> c1e5197
docker/setup-buildx-action	action	pinDigest	-> e468171
semgrep/semgrep	container	pinDigest	-> 7674a72
wow-actions/auto-comment	action	pinDigest	-> 2fc064c

---

Configuration

📅 Schedule: Branch creation - "before 7am on monday" in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[Thels]

Approving - https://docs.github.com/en/actions/reference/security/secure-use#using-third-party-actions