chore(deps): pin dependencies

Author: pactflow-renovate-bot[bot]

.github/workflows/build.yml

@@ -14,8 +14,8 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
       - name: install pyenv
@@ -46,7 +46,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: test
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
       - run: docker pull pactfoundation/pact-cli:latest
       - name: Can I deploy?
         run: GIT_BRANCH=${GIT_REF:11} make can_i_deploy
@@ -56,7 +56,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: can-i-deploy
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
       - run: docker pull pactfoundation/pact-cli:latest
       - name: Deploy
         run: GIT_BRANCH=${GIT_REF:11} make deploy

.github/workflows/trigger_partner_docs_update.yml

@@ -13,14 +13,14 @@ jobs:
     steps:
       - name: Trigger partner docs update
         if: github.repository == 'pactflow/example-consumer-python-sns'
-        uses: peter-evans/repository-dispatch@v1
+        uses: peter-evans/repository-dispatch@ce5485de42c9b2622d2ed064be479e8ed65e76f4 # v1
         with:
           token: ${{ secrets.GHTOKENFORTRIGGERINGPACTDOCSUPDATE }}
           repository: pactflow/partners.pactflow.io
           event-type: pactflow-example-consumer-python-sns-updated
       - name: Trigger docs update
         if: github.repository == 'pactflow/example-consumer-python-sns'
-        uses: peter-evans/repository-dispatch@v1
+        uses: peter-evans/repository-dispatch@ce5485de42c9b2622d2ed064be479e8ed65e76f4 # v1
         with:
           token: ${{ secrets.GHTOKENFORTRIGGERINGPACTDOCSUPDATE }}
           repository: pactflow/docs.pactflow.io

poetry.lock

@@ -17,6 +17,6 @@ python = "^3.11"
 
 [tool.poetry.dev-dependencies]
 pytest = "8.3.3"
-pytest-asyncio = "^0.24.0"
-pytest-mock = "^3.14.0"
-pact-python = "^2.2.2"
+pytest-asyncio = "0.24.0"
+pytest-mock = "3.14.0"
+pact-python = "2.2.2"