⬆️👨‍💻 Pin dependencies (#169)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/attest-build-provenance](https://redirect.github.com/actions/attest-build-provenance)
| action | pinDigest | -> `e8998f9` |
|
[munich-quantum-toolkit/workflows](https://redirect.github.com/munich-quantum-toolkit/workflows)
| action | pinDigest | -> `6ed99df` |
|
[release-drafter/release-drafter](https://redirect.github.com/release-drafter/release-drafter)
| action | pinDigest | -> `b1476f6` |

---

### Configuration

📅 **Schedule**: Branch creation - "every weekend" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/munich-quantum-toolkit/problemsolver).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS44Mi43IiwidXBkYXRlZEluVmVyIjoiNDEuODIuNyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiZ2l0aHViLWFjdGlvbnMiXX0=-->

Author: denialhaag

.github/workflows/cd.yml

@@ -14,7 +14,7 @@ permissions:
 jobs:
   python-packaging:
     name: 🐍 Packaging
-    uses: munich-quantum-toolkit/workflows/.github/workflows/[email protected]
+    uses: munich-quantum-toolkit/workflows/.github/workflows/reusable-python-packaging.yml@6ed99dff1be99ff1265b240b9b6a01c6df9a0017 # v1.11
     with:
       pure-python: true
 
@@ -37,7 +37,7 @@ jobs:
           path: dist
           merge-multiple: true
       - name: Generate artifact attestation for sdist and wheel(s)
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2
         with:
           subject-path: "dist/*"
       - uses: pypa/gh-action-pypi-publish@release/v1

.github/workflows/ci.yml

@@ -19,25 +19,25 @@ permissions:
 jobs:
   change-detection:
     name: 🔍 Change
-    uses: munich-quantum-toolkit/workflows/.github/workflows/[email protected]
+    uses: munich-quantum-toolkit/workflows/.github/workflows/reusable-change-detection.yml@6ed99dff1be99ff1265b240b9b6a01c6df9a0017 # v1.11
 
   python-linter:
     name: 🐍 Lint
     needs: change-detection
     if: fromJSON(needs.change-detection.outputs.run-python-tests)
-    uses: munich-quantum-toolkit/workflows/.github/workflows/[email protected]
+    uses: munich-quantum-toolkit/workflows/.github/workflows/reusable-python-linter.yml@6ed99dff1be99ff1265b240b9b6a01c6df9a0017 # v1.11
 
   python-tests:
     name: 🐍 Test
     needs: change-detection
     if: fromJSON(needs.change-detection.outputs.run-python-tests)
-    uses: munich-quantum-toolkit/workflows/.github/workflows/[email protected]
+    uses: munich-quantum-toolkit/workflows/.github/workflows/reusable-python-ci.yml@6ed99dff1be99ff1265b240b9b6a01c6df9a0017 # v1.11
 
   code-ql:
     name: 📝 CodeQL
     needs: change-detection
     if: fromJSON(needs.change-detection.outputs.run-code-ql)
-    uses: munich-quantum-toolkit/workflows/.github/workflows/[email protected]
+    uses: munich-quantum-toolkit/workflows/.github/workflows/reusable-code-ql-python.yml@6ed99dff1be99ff1265b240b9b6a01c6df9a0017 # v1.11
 
   required-checks-pass: # This job does nothing and is only used for branch protection
     name: 🚦 Check

.github/workflows/release-drafter.yml

@@ -18,6 +18,6 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: release-drafter/release-drafter@v6
+      - uses: release-drafter/release-drafter@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5 # v6
         env:
           GITHUB_TOKEN: ${{ github.token }}