chore(deps): pin dependencies

Author: renovate[bot]

.github/workflows/default-bare.yml

@@ -49,11 +49,11 @@ jobs:
             packages.microsoft.com:443
             pypi.org:443
             www.google.com:1025
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           path: ${{ env.ANSIBLE_ROLE }}
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
         with:
           python-version: '3.x'
       - name: Cache

.github/workflows/galaxy-release.yml

@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - name: 'Checkout git repo'
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           submodules: true
           fetch-depth: 0

.github/workflows/lint.yml

@@ -21,11 +21,11 @@ jobs:
       ANSIBLE_ROLE: juju4.ipv6
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           path: ${{ env.ANSIBLE_ROLE }}
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
         with:
           python-version: '3.13'
       - name: Install dependencies