chore(deps): pin dependencies (#3554)

* chore(deps): pin dependencies

* [automated] Update CHANGELOG.md

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: nf-core-bot <[email protected]>
Co-authored-by: Matthias Hörtenhuber <[email protected]>

Author: 3 people

.github/workflows/nextflow-source-test.yml

@@ -14,26 +14,26 @@ jobs:
 
     steps:
       - name: Check out Nextflow
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           repository: nextflow-io/nextflow
           path: nextflow
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         name: Check out nf-core/tools
         with:
           ref: dev
           path: nf-core-tools
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: "3.13"
           cache: pip
           cache-dependency-path: nf-core-tools/pyproject.toml
 
       - name: Set up Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4
         with:
           distribution: "temurin"
           architecture: x64

CHANGELOG.md

@@ -72,6 +72,7 @@
 - Handling issue with arity #3530 ([#3539](https://github.com/nf-core/tools/pull/3539))
 - chore(deps): update actions/github-script action to v7 ([#3545](https://github.com/nf-core/tools/pull/3545))
 - GitHub action for nightly tests with Nextflow from source ([#3553](https://github.com/nf-core/tools/pull/3553))
+- chore(deps): pin dependencies ([#3554](https://github.com/nf-core/tools/pull/3554))
 - Dev ([#3557](https://github.com/nf-core/tools/pull/3557))
 - chore(deps): update python:3.12-slim docker digest to bae1a06 ([#3558](https://github.com/nf-core/tools/pull/3558))
 - Update CI to test template pipelines with nf-test ([#3559](https://github.com/nf-core/tools/pull/3559))