Merge pull request #1253 from square/renovate/pin-dependencies

Pin dependencies

Author: steve-the-edwards

.github/actions/gradle-task/action.yml

@@ -123,7 +123,7 @@ runs:
 
     - name: Upload heap dump
       if: failure()
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4
       with:
         name: heap-dump
         path: ${{github.workspace}}/**/*{.hprof,.log}

.github/actions/gradle-tasks-with-emulator/action.yml

@@ -67,7 +67,7 @@ runs:
     # If the AVD cache didn't exist, create an AVD
     - name: create AVD and generate snapshot for caching
       if: steps.restore-avd-cache.outputs.cache-hit != 'true'
-      uses: reactivecircus/android-emulator-runner@v2
+      uses: reactivecircus/android-emulator-runner@62dbb605bba737720e10b196cb4220d374026a6d # v2
       with:
         api-level: ${{ inputs.api-level }}
         arch: x86_64
@@ -93,7 +93,7 @@ runs:
     # Run the actual emulator tests.
     # At this point every task should be up-to-date and the AVD should be ready to go.
     - name: run tests
-      uses: reactivecircus/android-emulator-runner@v2
+      uses: reactivecircus/android-emulator-runner@62dbb605bba737720e10b196cb4220d374026a6d # v2
       with:
         api-level: ${{ inputs.api-level }}
         arch: x86_64
@@ -105,7 +105,7 @@ runs:
 
     - name: Upload results
       if: ${{ always() }}
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4
       with:
         name: ${{ inputs.tests-name }}
         path: ${{github.workspace}}/**/build/reports/androidTests/connected/**