Pin dependencies

.gitea/workflows/test.yaml

@@ -14,10 +14,10 @@ concurrency:
 jobs:
   test-renovate:
     runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:42.8.1
+    container: ghcr.io/renovatebot/renovate:42.8.1@sha256:c9a5a60704ddfafae44a47b15dca1897e4e147fcb14c8b6d29ff8d3672ccf1d3
     steps:
       - name: Checkout
-        uses: actions/checkout@v5.0.0
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Run Renovate Test Script
         run: bash scripts/test-renovate.sh
@@ -30,10 +30,10 @@ jobs:
   e2e-renovate:
     runs-on: ubuntu-latest
     needs: test-renovate
-    container: ghcr.io/renovatebot/renovate:42.8.1
+    container: ghcr.io/renovatebot/renovate:42.8.1@sha256:c9a5a60704ddfafae44a47b15dca1897e4e147fcb14c8b6d29ff8d3672ccf1d3
     steps:
       - name: Checkout
-        uses: actions/checkout@v5.0.0
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Run Renovate E2E Script
         run: bash scripts/e2e-renovate.sh