chore(deps): Pin dependencies

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/setup-python](https://redirect.github.com/actions/setup-python)
| action | pinDigest | → `83679a8` |
| [docker/login-action](https://redirect.github.com/docker/login-action)
| action | pinDigest | → `5e57cd1` |
|
[helm/chart-testing-action](https://redirect.github.com/helm/chart-testing-action)
| action | pinDigest | → `0d28d31` |
| mcr.microsoft.com/windows/nanoserver | final | pinDigest | → `5e9a1be`
|
| paskalmaksim/aks-node-termination-handler | | pinDigest | → `718405d`
|

---

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi43Mi4wIiwidXBkYXRlZEluVmVyIjoiNDIuNzIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwicmVub3ZhdGUiXX0=-->

Co-authored-by: renovate-vince-riv[bot] <227500739+renovate-vince-riv[bot]@users.noreply.github.com>

Author: renovate-vince-riv[bot]

.github/workflows/chart-test.yml

@@ -16,10 +16,10 @@ jobs:
       - name: Set up Helm
         uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@v2
+        uses: helm/chart-testing-action@0d28d3144d3a25ea2cc349d6e59901c4ff469b3b # v2
 
       - name: Run chart-testing (lint)
         run: ct lint --target-branch main

.github/workflows/release.yaml

@@ -49,7 +49,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: build
     steps:
-      - uses: docker/login-action@v3
+      - uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
@@ -62,7 +62,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: build
     steps:
-      - uses: docker/login-action@v3
+      - uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
@@ -80,7 +80,7 @@ jobs:
         windows-version: ['ltsc2019', 'ltsc2022', 'ltsc2025']
     needs: build
     steps:
-      - uses: docker/login-action@v3
+      - uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
@@ -94,7 +94,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [publish-linux-amd64, publish-linux-arm64, publish-windows-amd64]
     steps:
-      - uses: docker/login-action@v3
+      - uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}

Dockerfile.windows

@@ -1,4 +1,4 @@
-ARG WINDOWS_VERSION=ltsc2025
+ARG WINDOWS_VERSION=ltsc2025@sha256:5e9a1be8f0685f35156a524fb8a88b9d36085db12def20eb52e11b0bb1f79a10
 
 FROM mcr.microsoft.com/windows/nanoserver:$WINDOWS_VERSION
 

charts/aks-node-termination-handler/values.yaml

@@ -1,4 +1,4 @@
-image: paskalmaksim/aks-node-termination-handler:latest
+image: paskalmaksim/aks-node-termination-handler:latest@sha256:718405dbbd0a943c2aac0feedf3dafd04b2833a92cb1e37fbb929b2ef45a15d0
 imagePullPolicy: Always
 imagePullSecrets: []