chore(deps): pin GH action from semver to sha (#8807)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: mmaietta

.github/actions/pretest/action.yml

@@ -40,7 +40,7 @@ runs:
       shell: bash
 
     - name: Cache Electron
-      uses: actions/[email protected]
+      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
       with:
         path: ${{ inputs.cache-path }}
         key: ${{ inputs.cache-key }}

.github/workflows/deploy-docker.yml

@@ -32,7 +32,7 @@ jobs:
         ]
     steps:
       - name: Download images artifact - node${{ matrix.nodeMajorVersion }}
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
         with:
           name: electron-builder-all-${{ matrix.nodeMajorVersion }}
           path: ${{ runner.temp }}

.github/workflows/deploy-netlify.yml

@@ -25,7 +25,7 @@ jobs:
       - name: Build typdoc site
         run: pnpm docs:all
 
-      - uses: jsmrcaga/[email protected]
+      - uses: jsmrcaga/action-netlify-deploy@06b6a09e152823cce0d76c0dbb22b914934de198 # v2.3.0
         with:
           NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
           NETLIFY_SITE_ID: ${{ secrets.NETLIFY_SITE_ID }}
@@ -39,7 +39,7 @@ jobs:
 
       # Creates a status check with link to preview
       - name: Set Status check on commit
-        uses: guibranco/[email protected]
+        uses: guibranco/github-status-action-v2@0849440ec82c5fa69b2377725b9b7852a3977e76 # v1.1.13
         with:
           authToken: ${{ secrets.GITHUB_TOKEN }}
           state: success

.github/workflows/docker-build.yml

@@ -34,7 +34,7 @@ jobs:
           docker save -o ${{ runner.temp }}/electron-builder-all-${{ env.NODE_TAG }}.tar electronuserland/builder
 
       - name: Bundle all images
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4
         with:
           name: electron-builder-all-${{ env.NODE_TAG }}
           path: ${{ runner.temp }}/electron-builder-all-${{ env.NODE_TAG }}.tar

.github/workflows/pr-netlify.yml

@@ -26,8 +26,8 @@ jobs:
         run: pnpm docs:all
 
       # Sets the branch name as environment variable
-      - uses: nelonoel/[email protected]
-      - uses: jsmrcaga/[email protected]
+      - uses: nelonoel/branch-name@1ea5c86cb559a8c4e623da7f188496208232e49f # v1.0.1
+      - uses: jsmrcaga/action-netlify-deploy@06b6a09e152823cce0d76c0dbb22b914934de198 # v2.3.0
         with:
           NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
           NETLIFY_SITE_ID: ${{ secrets.NETLIFY_SITE_ID }}
@@ -40,7 +40,7 @@ jobs:
 
       # Creates a status check with link to preview
       - name: Set Status check on commit
-        uses: guibranco/[email protected]
+        uses: guibranco/github-status-action-v2@0849440ec82c5fa69b2377725b9b7852a3977e76 # v1.1.13
         with:
           authToken: ${{ secrets.GITHUB_TOKEN }}
           state: success

.github/workflows/test.yaml

@@ -87,7 +87,7 @@ jobs:
       - name: Download test-runner if exists
         if: needs.run-docker-build.result == 'success'
         id: download-test-runner-image
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
         with:
           name: electron-builder-all-${{ env.TEST_IMAGE_NODE_MAJOR_VERSION }}
           path: ${{ runner.temp }}
@@ -132,7 +132,7 @@ jobs:
 
       - name: Download test-runner if exists
         if: needs.run-docker-build.result == 'success'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
         with:
           name: electron-builder-all-${{ env.TEST_IMAGE_NODE_MAJOR_VERSION }}
           path: ${{ runner.temp }}