fix(deps): pin dependencies

.github/workflows/notify-assignee.yaml

@@ -8,7 +8,7 @@ permissions:
 jobs:
   notify-assignee:
     name: Notify Assignee
-    uses: ScribeMD/slack-templates/.github/workflows/[email protected]
+    uses: ScribeMD/slack-templates/.github/workflows/notify-assignee.yaml@fbd2fa66c991d2330e2a225a5b81217ed8ade9ae # 0.6.33
     secrets:
       SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
       SLACK_ASSIGN_CHANNEL_ID: ${{ secrets.SLACK_ASSIGN_CHANNEL_ID }}

.github/workflows/notify-reviewers.yaml

@@ -8,7 +8,7 @@ permissions:
 jobs:
   notify-reviewers:
     name: Notify Reviewers
-    uses: ScribeMD/slack-templates/.github/workflows/[email protected]
+    uses: ScribeMD/slack-templates/.github/workflows/notify-reviewers.yaml@fbd2fa66c991d2330e2a225a5b81217ed8ade9ae # 0.6.33
     secrets:
       SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
       SLACK_REVIEW_CHANNEL_ID: ${{ secrets.SLACK_REVIEW_CHANNEL_ID }}

.github/workflows/test.yaml

@@ -37,7 +37,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Check out repository.
-        uses: actions/[email protected]
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           fetch-depth: 0
       - name: Install and run pre-commit hooks (self-test).
@@ -50,7 +50,7 @@ jobs:
           bump: ${{ inputs.bump }}
       - name: Send Slack notification with job status.
         if: always()
-        uses: ScribeMD/[email protected]
+        uses: ScribeMD/slack-templates@fbd2fa66c991d2330e2a225a5b81217ed8ade9ae # 0.6.33
         with:
           bot-token: ${{ secrets.SLACK_BOT_TOKEN }}
           channel-id: ${{ secrets.SLACK_ACTIONS_CHANNEL_ID }}

action.yaml

@@ -48,28 +48,28 @@ runs:
       shell: bash
     - name: Set up .NET SDK at the version specified in .tool-versions.
       if: steps.tool-versions.outputs.dotnet-core != ''
-      uses: actions/[email protected]
+      uses: actions/setup-dotnet@3447fd6a9f9e57506b15f895c5b76d3b197dc7c2 # v3.2.0
       with:
         dotnet-version: ${{ steps.tool-versions.outputs.dotnet-core }}
     - name: Set up Node.js at the version specified in .tool-versions.
-      uses: actions/[email protected]
+      uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
       with:
         node-version: ${{ steps.tool-versions.outputs.nodejs }}
     - name: Set up Python at the version specified in .tool-versions.
-      uses: actions/[email protected]
+      uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
       with:
         python-version: ${{ steps.tool-versions.outputs.python }}
     - name: Set up Ruby at the version specified in .tool-versions.
       if: steps.tool-versions.outputs.ruby != ''
-      uses: ruby/[email protected]
+      uses: ruby/setup-ruby@54a18e26dbbb1eabc604f317ade9a5788dddef81 # v1.159.0
       with:
         ruby-version: ${{ steps.tool-versions.outputs.ruby }}
     - name: Install asdf.
-      uses: asdf-vm/actions/[email protected]
+      uses: asdf-vm/actions/setup@05e0d2ed97b598bfce82fd30daf324ae0c4570e6 # v3.0.2
       with:
         asdf_branch: v0.13.1
     - name: Cache asdf and asdf-managed tools.
-      uses: actions/[email protected]
+      uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
       id: asdf-cache
       with:
         path: ${{ env.ASDF_DIR }}
@@ -79,7 +79,7 @@ runs:
           }}
     - name: Install asdf-managed tools based on .tool-versions.
       if: steps.asdf-cache.outputs.cache-hit != 'true'
-      uses: asdf-vm/actions/[email protected]
+      uses: asdf-vm/actions/install@05e0d2ed97b598bfce82fd30daf324ae0c4570e6 # v3.0.2
     - name: Restore .tool-versions.
       run: git restore .tool-versions
       shell: bash
@@ -90,7 +90,7 @@ runs:
         echo "PATH=$poetry_cache" >>"$GITHUB_OUTPUT"
       shell: bash
     - name: Cache Poetry dependencies.
-      uses: actions/[email protected]
+      uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
       with:
         path: |
           ${{ steps.poetry-cache.outputs.PATH }}
@@ -116,7 +116,7 @@ runs:
         echo "PATH=$npm_cache" >>"$GITHUB_OUTPUT"
       shell: bash
     - name: Cache npm dependencies.
-      uses: actions/[email protected]
+      uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
       with:
         path: ${{ steps.npm-cache.outputs.PATH }}
         key: >
@@ -126,7 +126,7 @@ runs:
             '.pre-commit-hooks.yaml'
           ) }}
     - name: Use Docker in rootless mode.
-      uses: ScribeMD/[email protected]
+      uses: ScribeMD/rootless-docker@6bd157a512c2fafa4e0243a8aa87d964eb890886 # 0.2.2
     - name: Determine name of MegaLinter Docker image from pre-commit config.
       id: megalinter
       run: |
@@ -150,11 +150,11 @@ runs:
             output_stream.write(f"DOCKER_IMAGE={docker_image}\n")
       shell: python
     - name: Cache Docker images.
-      uses: ScribeMD/[email protected]
+      uses: ScribeMD/docker-cache@e53d303afe42d4c1ebeeb8ab0b4c47eba1bbf3e0 # 0.3.6
       with:
         key: ${{ steps.megalinter.outputs.DOCKER_IMAGE }}
     - name: Cache pre-commit hooks.
-      uses: actions/[email protected]
+      uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
       with:
         path: ~/.cache/pre-commit
         key: >
@@ -186,7 +186,7 @@ runs:
         inputs.bump == 'true'
         && github.event_name == 'push' && github.ref == 'refs/heads/main'
         && !startsWith(github.event.head_commit.message, 'bump:')
-      uses: commitizen-tools/[email protected]
+      uses: commitizen-tools/commitizen-action@bc2616fec6b3effc9ad20380f19550a8b18cdbdf # 0.20.0
       with:
         git_name: commitizen-github-action[bot]
         git_email: commitizen-github-action[bot]@users.noreply.github.com