chore(deps): pin dependencies

Author: renovate[bot]

.github/actions/setup-rust/action.yml

@@ -24,13 +24,13 @@ runs:
         components: clippy, rustfmt
 
     - name: Rust Dependency Cache
-      uses: Swatinem/rust-cache@v2
+      uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2
       with:
         save-if: ${{ github.ref_name == 'develop' }}
         shared-key: "rust-cache-${{ runner.os }}-${{ runner.environment }}" # To allow reuse across jobs
 
     - name: Rust Compile Cache
-      uses: mozilla-actions/[email protected]
+      uses: mozilla-actions/sccache-action@7d986dd989559c6ecdb630a3fd2557667be217ad # v0.0.9
     - name: Rust Compile Cache Config
       shell: bash
       run: |

.github/workflows/ci.yml

@@ -46,7 +46,7 @@ jobs:
           cargo codspeed build --profile bench
 
       - name: Run benchmarks
-        uses: CodSpeedHQ/action@v3
+        uses: CodSpeedHQ/action@76578c2a7ddd928664caa737f0e962e3085d4e7c # v3
         with:
           run: cargo codspeed run
           token: ${{ secrets.CODSPEED_TOKEN }}

.github/workflows/fuzz.yml

@@ -17,12 +17,12 @@ jobs:
         run: cargo fuzz run fuzz_compress -- -max_total_time=600
         continue-on-error: true
       - name: Archive crash artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: fuzzing-crash-artifacts
           path: fuzz/artifacts
       - name: Archive fuzzing corpus
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: fuzzing-corpus
           path: fuzz/corpus

.github/workflows/release-plz.yml

@@ -21,7 +21,7 @@ jobs:
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@stable
       - name: Run release-plz
-        uses: MarcoIeni/[email protected]
+        uses: MarcoIeni/release-plz-action@574c1d0ed8491b294f596b7148bafd08cca6a600 # v0.5
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}