Pin dependencies

Author: renovate[bot]

.github/workflows/check_versions.yml

@@ -34,7 +34,7 @@ jobs:
       latestverhash: ${{ steps.latest-version.outputs.latestverhash }}
     steps:
       - name: Build image
-        uses: docker/build-push-action@v7.2.0
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
         with:
           push: false
           load: true

.github/workflows/deploy.yml

@@ -38,7 +38,7 @@ jobs:
 
   deploy:
     name: Deploy without telegraf
-    uses: sdr-enthusiasts/common-github-workflows/.github/workflows/sdre.yml@main
+    uses: sdr-enthusiasts/common-github-workflows/.github/workflows/sdre.yml@7e2533c291e2ecc614b06bd20c3a0c5ada779c59 # main
     with:
       push_enabled: true
       push_destinations: ghcr.io
@@ -52,7 +52,7 @@ jobs:
       ghcr_token: ${{ secrets.GITHUB_TOKEN }}
   deploy_with_telegraf:
     name: Deploy with telegraf and healthcheck
-    uses: sdr-enthusiasts/common-github-workflows/.github/workflows/sdre.yml@main
+    uses: sdr-enthusiasts/common-github-workflows/.github/workflows/sdre.yml@7e2533c291e2ecc614b06bd20c3a0c5ada779c59 # main
     with:
       push_enabled: true
       push_destinations: ghcr.io

.github/workflows/deploy_trixie.yml

@@ -47,7 +47,7 @@ jobs:
     if: |
       github.event.inputs.build_latest_as_test == 'false' ||
       github.event.inputs.build_latest_as_test == ''
-    uses: sdr-enthusiasts/common-github-workflows/.github/workflows/sdre.yml@main
+    uses: sdr-enthusiasts/common-github-workflows/.github/workflows/sdre.yml@7e2533c291e2ecc614b06bd20c3a0c5ada779c59 # main
     with:
       push_enabled: true
       push_destinations: ghcr.io
@@ -66,7 +66,7 @@ jobs:
     if: |
       github.event.inputs.build_latest_as_test == 'false' ||
       github.event.inputs.build_latest_as_test == ''
-    uses: sdr-enthusiasts/common-github-workflows/.github/workflows/sdre.yml@main
+    uses: sdr-enthusiasts/common-github-workflows/.github/workflows/sdre.yml@7e2533c291e2ecc614b06bd20c3a0c5ada779c59 # main
     with:
       push_enabled: true
       push_destinations: ghcr.io