build(deps): pin dependencies (#10)

Co-authored-by: aki-bot <103840025+aki-bot[bot]@users.noreply.github.com>
Co-authored-by: Aki Kanellis <hello@akikanellis.com>

.github/workflows/test.yml

@@ -25,7 +25,7 @@ jobs:
 
       - name: Install Python
         # yamllint disable-line rule:line-length
-        uses: actions/setup-python@v3.1.2
+        uses: actions/setup-python@98f2ad02fd48d057ee3b4d4f66525b231c3e52b6 # tag=v3.1.2
         with:
           # renovate: datasource=docker depName=python versioning=docker
           python-version: 3.10.4
@@ -35,7 +35,8 @@ jobs:
         run: just install
 
       - name: Cache Vagrant boxes
-        uses: actions/cache@v3.0.2
+        # yamllint disable-line rule:line-length
+        uses: actions/cache@48af2dc4a9e8278b89d7fa154b955c30c6aaab09 # tag=v3.0.2
         with:
           path: ~/.vagrant.d/boxes
           key: "${{ runner.os }}-\