chore(deps): pin dependencies (#115)

.github/workflows/continuous-delivery.yml

@@ -10,25 +10,25 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
         with:
           fetch-depth: 0
 
       - name: Set up Helm
-        uses: azure/[email protected]
+        uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3.5
         with:
           version: v3.6.2
 
       - name: Create kind cluster
-        uses: helm/[email protected]
+        uses: helm/kind-action@fa81e57adff234b2908110485695db0f181f3c67 # v1.7.0
 
       - name: Deploy using helm chart
         run: |
           helm upgrade --install cnpg --namespace cnpg-system \
           --create-namespace charts/cloudnative-pg --wait
 
       - name: Install kubectl
-        uses: azure/[email protected]
+        uses: azure/setup-kubectl@901a10e89ea615cf61f57ac05cecdf23e7de06d8 # v3.2
 
       - name: Deploy a cluster
         run: |

.github/workflows/lint.yml

@@ -11,21 +11,21 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
         with:
           fetch-depth: 0
 
       - name: Set up Helm
-        uses: azure/[email protected]
+        uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3.5
         with:
           version: v3.4.0
 
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@bd6b4b6205c4dbad673328db7b31b7fab9e241c0 # v4
         with:
           python-version: 3.7
 
       - name: Set up chart-testing
-        uses: helm/[email protected]
+        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
 
       - name: Run chart-testing (list-changed)
         id: list-changed

.github/workflows/release-pr.yml

@@ -13,15 +13,15 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/[email protected]
+        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
       -
         name: Get tag
         run: |
           echo "TAG=${GITHUB_REF##*/}" >> $GITHUB_ENV
       -
         name: Pull Request
         id: open-pr
-        uses: repo-sync/[email protected]
+        uses: repo-sync/pull-request@65785d95a5a466e46a9d0708933a3bd51bbf9dde # v2.6.2
         with:
           destination_branch: "main"
           github_token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release-publish.yml

@@ -10,12 +10,12 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
         with:
           fetch-depth: 0
 
       - name: Publish Helm charts
-        uses: stefanprodan/[email protected]
+        uses: stefanprodan/helm-gh-pages@0ad2bb377311d61ac04ad9eb6f252fb68e207260 # v1.7.0
         with:
           helm_version: 3.4.0
           token: "${{ secrets.REPO_GHA_PAT }}"

.github/workflows/release-tag.yml

@@ -15,27 +15,27 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/[email protected]
+        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
       -
         name: Temporarily disable "include administrators" branch protection
         if: ${{ always() && github.ref == 'refs/heads/main' }}
         id: disable_include_admins
-        uses: benjefferies/[email protected]
+        uses: benjefferies/branch-protection-bot@4b03de4af31ae187c57689946ae340d669c42dd4 # 1.0.8
         with:
           access_token: ${{ secrets.REPO_GHA_PAT }}
           branch: main
           enforce_admins: false
       -
         name: Create tag
         if: github.event.pull_request.merged == true && startsWith(${{ github.head_ref }}, "release/")
-        uses: christophebedard/[email protected]
+        uses: christophebedard/tag-version-commit@ea0363ff76cae3e81c21695cdd21218204be290b # v1.6.3
         with:
           token: ${{ secrets.REPO_GHA_PAT }}
           version_regex: '^Release ([a-z-]+-v[0-9]+\.[0-9]+\.[0-9]+)'
           dry_run: false
       -
         name: Enable "include administrators" branch protection
-        uses: benjefferies/[email protected]
+        uses: benjefferies/branch-protection-bot@4b03de4af31ae187c57689946ae340d669c42dd4 # 1.0.8
         if: ${{ always() && github.ref == 'refs/heads/main' }}
         with:
           access_token: ${{ secrets.REPO_GHA_PAT }}