Pin dependencies

.forgejo/workflows/integration.yml

@@ -11,7 +11,7 @@ jobs:
   integration:
     runs-on: lxc-trixie
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - id: forgejo
         uses: https://code.forgejo.org/actions/setup-forgejo@0191c04814b526caf141138a5567000ab08ddae0 # v3.2.0

.forgejo/workflows/release.yml

@@ -9,7 +9,7 @@ jobs:
 
     steps:
       # needs to be in a different dir, so binary and rna cache don't conflict
-      - uses: https://data.forgejo.org/actions/checkout@v6
+      - uses: https://data.forgejo.org/actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           path: forgejo-release
 

.forgejo/workflows/tests.yml

@@ -11,7 +11,7 @@ jobs:
       image: data.forgejo.org/oci/node:24-trixie
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: lint action-docs
         run: |