pin more actions

Author: phryneas

.github/workflows/api-extractor.yml

@@ -22,7 +22,7 @@ jobs:
           node-version: ">=23.6.0"
 
       - name: Install dependencies (with cache)
-        uses: bahmutov/npm-install@v1
+        uses: bahmutov/npm-install@20216767ca67f0f7b4d095dc5859c5700a6581cb #v1
 
         # Builds the library and runs the api extractor
       - name: Run Api-Extractor

.github/workflows/arethetypeswrong.yml

@@ -24,7 +24,7 @@ jobs:
         with:
           node-version: ">=23.6.0"
       - name: Install dependencies (with cache)
-        uses: bahmutov/npm-install@v1
+        uses: bahmutov/npm-install@20216767ca67f0f7b4d095dc5859c5700a6581cb #v1
 
       - name: Run build
         run: npm run build

.github/workflows/cleanup-checks.yml

@@ -50,7 +50,7 @@ jobs:
           node-version: ">=23.6.0"
 
       - name: Install dependencies (with cache)
-        uses: bahmutov/npm-install@v1
+        uses: bahmutov/npm-install@20216767ca67f0f7b4d095dc5859c5700a6581cb #v1
 
       - name: Run Api-Extractor
         run: npm run extract-api

.github/workflows/compare-build-output.yml

@@ -23,7 +23,7 @@ jobs:
         with:
           node-version: ">=23.6.0"
       - name: Install dependencies (with cache)
-        uses: bahmutov/npm-install@v1
+        uses: bahmutov/npm-install@20216767ca67f0f7b4d095dc5859c5700a6581cb #v1
 
       - name: Run comparison script
         id: attw

.github/workflows/docmodel.yml

@@ -22,7 +22,7 @@ jobs:
           node-version: ">=23.6.0"
 
       - name: Install dependencies (with cache)
-        uses: bahmutov/npm-install@v1
+        uses: bahmutov/npm-install@20216767ca67f0f7b4d095dc5859c5700a6581cb #v1
 
       - name: Generate documentation model
         run: npm run docmodel

.github/workflows/knip.yml

@@ -15,6 +15,6 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
       - name: Install dependencies (with cache)
-        uses: bahmutov/npm-install@v1
+        uses: bahmutov/npm-install@20216767ca67f0f7b4d095dc5859c5700a6581cb #v1
       - name: Run knip
         run: npm run knip

.github/workflows/publish-pr-releases.yml

@@ -42,7 +42,7 @@ jobs:
           file-filter: "scripts/codemods/ac3-to-ac4/**"
 
       - name: Install dependencies with cache
-        uses: bahmutov/npm-install@v1
+        uses: bahmutov/npm-install@20216767ca67f0f7b4d095dc5859c5700a6581cb #v1
 
       - name: Build AC
         run: npm run build

.github/workflows/scheduled-test-canary.yml

@@ -33,7 +33,7 @@ jobs:
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with:
           node-version: ">=23.6.0"
-      - uses: bahmutov/npm-install@v1
+      - uses: bahmutov/npm-install@20216767ca67f0f7b4d095dc5859c5700a6581cb #v1
       - run: |
           npm install react@${MATRIX_TAG} react-dom@${MATRIX_TAG}
         env:

.github/workflows/size-limit.yml

@@ -21,7 +21,7 @@ jobs:
         with:
           node-version: ">=23.6.0"
       - name: Install dependencies (with cache)
-        uses: bahmutov/npm-install@v1
+        uses: bahmutov/npm-install@20216767ca67f0f7b4d095dc5859c5700a6581cb #v1
       - name: Run size-limit
         uses: andresz1/size-limit-action@e7493a72a44b113341c0cf6186ab49c17c4b65c1 # v1
         with: