chore(deps): pin dependencies

Author: renovate-bot

.github/workflows/build-and-test.yml

@@ -19,10 +19,10 @@ jobs:
       checks: write
       statuses: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.1.0
 
       - name: Setup node 24
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.5.0
         with:
           node-version: 24.11.1
 
@@ -58,7 +58,7 @@ jobs:
 
       # If index.js was different than expected, upload the expected version as an artifact
       - name: Upload dist as artifact if differences detected
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v5.0.0
         if: ${{ failure() && steps.diff.conclusion == 'failure' }}
         with:
           name: dist
@@ -100,7 +100,7 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.1.0
 
       - name: Install Octopus CLI
         uses: OctopusDeploy/install-octopus-cli-action@v3

.github/workflows/codeql.yml

@@ -34,11 +34,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@v6.1.0
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4
+      uses: github/codeql-action/init@v4.39.1
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -51,9 +51,9 @@ jobs:
     # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v4
+      uses: github/codeql-action/autobuild@v4.39.1
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4
+      uses: github/codeql-action/analyze@v4.39.1
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/release-please.yml

@@ -23,7 +23,7 @@ jobs:
           token: ${{ secrets.GITHUB_TOKEN }}
           command: github-release
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.7.0
         if: ${{ steps.release.outputs.release_created }}
 
       - name: Tag minor version

.github/workflows/test-login.yml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Test login to Octopus
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.1.0
 
       - name: Install Octopus CLI
         uses: OctopusDeploy/install-octopus-cli-action@v3