chore(deps): pin dependencies

| datasource  | package                                     | from   | to     |
| ----------- | ------------------------------------------- | ------ | ------ |
| github-tags | actions/setup-node                          | v4.0.0 | v4.0.1 |
| github-tags | actions/upload-artifact                     | v3.1.3 | v4.3.0 |
| github-tags | google-github-actions/release-please-action | v3     | v4     |

.github/actions/save-logs/action.yaml

@@ -10,7 +10,7 @@ runs:
         sudo chown $USER /tmp/uds-*.log || echo ""
       shell: bash
 
-    - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+    - uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 # v4.3.0
       with:
         name: debug-log
         path: |

.github/actions/setup/action.yaml

@@ -23,7 +23,7 @@ runs:
         download-init-package: true
 
     - name: Use Node.js latest
-      uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
+      uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4.0.1
       with:
         node-version: 20
 
@@ -40,14 +40,14 @@ runs:
       run: brew install defenseunicorns/tap/uds@0.6.2
 
     - name: Login to GHCR
-      uses: docker/login-action@v3
+      uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3
       with:
         registry: ghcr.io
         username: dummy
         password: ${{ inputs.gh_token }}
 
     # Retries intermittent registry1 login action
-    - uses: Wandalen/wretry.action@v1
+    - uses: Wandalen/wretry.action@0f47298855b1e679b5f7d95b2135e3c0813b0f01 # v1
       with:
         attempt_limit: 3
         action: docker/login-action@v3

.github/workflows/commitlint.yaml

@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Node.js
-        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4.0.1
 
       - name: Install commitlint
         run: npm install --save-dev @commitlint/{config-conventional,cli}

.github/workflows/pull-request-conditionals.yaml

@@ -24,9 +24,9 @@ jobs:
   lint-check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
       - name: Use Node.js latest
-        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4.0.1
         with:
           node-version: 20
       - name: Set up Homebrew

.github/workflows/tag-and-release.yml

@@ -15,7 +15,7 @@ jobs:
     steps:
       - name: Create release tag
         id: tag
-        uses: google-github-actions/release-please-action@v3
+        uses: google-github-actions/release-please-action@cc61a07e2da466bebbc19b3a7dd01d6aecb20d1e # v4
         with:
           command: manifest # use configs in release-please-config.json
       - id: release-flag