ci: fix invalid SHA pins for docker/metadata-action and docker/setup-buildx-action

Agent-Logs-Url: https://github.com/nextcloud/documentation/sessions/5932d893-4bf0-4bb9-9e1d-cf69e3a9e2ba

Co-authored-by: skjnldsv <14975046+skjnldsv@users.noreply.github.com>

Author: Copilot

.github/workflows/docker-build.yml

@@ -25,7 +25,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@b5730e84e09ef46c65d80d5f65f899e59003028b # v3.10.0
+        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
 
       - name: Login to GitHub Container Registry
         if: github.event_name != 'pull_request'
@@ -37,7 +37,7 @@ jobs:
 
       - name: Extract metadata for Docker
         id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbea8a09e7f1f55b7a7b3b3ea4a8 # v5.7.0
+        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
         with:
           images: ghcr.io/${{ github.repository }}/sphinx-latex
           tags: |