Update first-party Pulumi dependencies

Author: pulumi-renovate[bot]

.github/workflows/export-repo-secrets.yml

@@ -13,7 +13,7 @@ jobs:
           app-id: 1256780 # Export Secrets GitHub App
           private-key: ${{ secrets.EXPORT_SECRETS_PRIVATE_KEY }}
       - name: Export secrets to ESC
-        uses: pulumi/esc-export-secrets-action@v1
+        uses: pulumi/esc-export-secrets-action@9d6485759b6adff2538ae91f1b77cc96265c9dad # v1
         with:
           organization: pulumi
           org-environment: github-secrets/pulumi-get.pulumi.com

.github/workflows/master.yml

@@ -31,7 +31,7 @@ jobs:
         role-session-name: get.pulumi.com-${{ github.run_id }}
     - run: yarn install
       working-directory: infrastructure
-    - uses: pulumi/actions@v4
+    - uses: pulumi/actions@a3f382e1242b69ab33854c253c3b580f1226348e # v4
       with:
         command: up
         stack-name: "pulumi/get-pulumi-com/staging"

.github/workflows/production.yml

@@ -28,7 +28,7 @@ jobs:
         role-session-name: get.pulumi.com-${{ github.run_id }}
     - run: yarn install
       working-directory: infrastructure
-    - uses: pulumi/actions@v4
+    - uses: pulumi/actions@a3f382e1242b69ab33854c253c3b580f1226348e # v4
       with:
         command: up
         stack-name: "pulumi/get-pulumi-com/production"

.github/workflows/pull-request.yml

@@ -30,15 +30,15 @@ jobs:
     - run: yarn install
       working-directory: infrastructure
     - if: github.base_ref == 'production'
-      uses: pulumi/actions@v4
+      uses: pulumi/actions@a3f382e1242b69ab33854c253c3b580f1226348e # v4
       with:
         command: preview
         work-dir: infrastructure
         stack-name: "pulumi/get-pulumi-com/production"
       env:
           PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}
     - if: github.base_ref == 'master'
-      uses: pulumi/actions@v4
+      uses: pulumi/actions@a3f382e1242b69ab33854c253c3b580f1226348e # v4
       with:
         command: preview
         work-dir: infrastructure