[☠️] Pin dependencies

Author: renovate[bot]

etc/workflow-skeleton/generate-{{ path }}.yaml

@@ -10,9 +10,9 @@ jobs:
     outputs:
       version: {{ "${{ steps.supported-versions-matrix.outputs.lowest }}" }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - id: supported-versions-matrix
-        uses: WyriHaximus/github-action-composer-php-versions-in-range@v1
+        uses: WyriHaximus/github-action-composer-php-versions-in-range@ea3d54bf7909d5607c4f32bda9cd8d64e420ec99 # v1
         with:
           workingDirectory: clients/{{ path }}
   generate-{{ path|replace({".": "_"})|lower }}:
@@ -23,7 +23,7 @@ jobs:
     container:
       image: wyrihaximusnet/php:{{ "${{ needs.supported-versions-matrix.outputs.version }}" }}-nts-alpine-slim-dev-root
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - uses: ramsey/composer-install@v2
       - uses: ramsey/composer-install@v2
         with:
@@ -41,12 +41,12 @@ jobs:
           php -r 'file_put_contents(getenv("GITHUB_OUTPUT"), "previous=" . md5(file_get_contents("etc/specs/{{ path }}/previous.spec.yaml")) . "\n", FILE_APPEND);'
       - name: Look current up spec version
         id: look-current-up-spec-version
-        uses: mikefarah/[email protected]
+        uses: mikefarah/yq@f03c9dc599c37bfcaf533427211d05e51e6fee64 # v4.47.1
         with:
           cmd: yq '.info.version' 'etc/specs/{{ path }}/current.spec.yaml'
       - name: Look previous up spec version
         id: look-previous-up-spec-version
-        uses: mikefarah/[email protected]
+        uses: mikefarah/yq@f03c9dc599c37bfcaf533427211d05e51e6fee64 # v4.47.1
         with:
           cmd: yq '.info.version' 'etc/specs/{{ path }}/previous.spec.yaml'
       - name: Generate spec diff
@@ -64,7 +64,7 @@ jobs:
         run: |
           make generate-client {{ path }}
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7
         with:
           branch: "{{ path }}/from-{{ "${{ steps.look-current-up-spec-version.outputs.result }}" }}-{{ "${{ steps.spec-hash.outputs.current }}" }}-from-{{ "${{ steps.look-previous-up-spec-version.outputs.result }}" }}-{{ "${{ steps.spec-hash.outputs.current }}" }}"
           token: {{ "${{ secrets.SUBSPLIT_GITHUB_TOKEN }}" }}