github:lock actions to commit

Author: rpkelly

.github/actions/setup-node/action.yml

@@ -13,13 +13,13 @@ runs:
         echo "OS_ARCH=`uname -m`" >> $GITHUB_ENV
         sudo apt -y install build-essential openssl libssl-dev pkg-config liblz4-tool
       shell: bash
-    - uses: actions/cache@v4
+    - uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf
       # Cache `cargo-make`, `cargo-cache`
       with:
         path: |
           ~/.cargo
         key: ${{ hashFiles('.github/workflows/cache.yml') }}-${{ runner.os }}-${{ env.OS_ARCH }}
-    - uses: actions/cache@v4
+    - uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf
       # Cache first-party code dependencies
       with:
         path: |

.github/workflows/build.yml

@@ -40,7 +40,7 @@ jobs:
           delay=$((1 + $RANDOM % 32))
           echo "Waiting ${delay} seconds before execution"
           sleep $delay
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Preflight step to set up the runner
         uses: ./.github/actions/setup-node
       - run: rustup component add rustfmt

.github/workflows/cache.yml

@@ -18,7 +18,7 @@ jobs:
       labels: bottlerocket_ubuntu-latest_8-core
     continue-on-error: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Preflight step to set up the runner
         uses: ./.github/actions/setup-node
         with:

.github/workflows/weekly.yml

@@ -30,7 +30,7 @@ jobs:
       fail-fast: false
     name: "Build ${{ matrix.arch }}"
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Preflight step to set up the runner
         uses: ./.github/actions/setup-node
       - run: |