update deps, pin action deps

Author: good-lly

.github/workflows/sonarcloud.yml

@@ -52,8 +52,8 @@ jobs:
       - name: Analyze with SonarCloud
 
         # You can pin the exact commit or the version.
-        # uses: SonarSource/sonarcloud-github-action@v2.2.0
-        uses: SonarSource/sonarqube-scan-action@v6.0.0
+        # uses: SonarSource/sonarcloud-github-action@v7
+        uses: SonarSource/sonarqube-scan-action@a31c9398be7ace6bbfaf30c0bd5d415f843d45e9 #pin to a specific commit v7
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} # Generate a token on Sonarcloud.io, add it to the secrets of this repo with the name SONAR_TOKEN (Settings > Secrets > Actions > add new repository secret)
         with:

.github/workflows/test-e2e.yml

@@ -35,7 +35,7 @@ jobs:
         run: npm run build
 
       - name: Run e2e tests
-        uses: nick-fields/[email protected].0
+        uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3.0.2 pin
         with:
           max_attempts: 3
           retry_on: any