chore(deps): pin dependencies (#276)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | pinDigest | -> `11bd719` |
| [actions/setup-go](https://redirect.github.com/actions/setup-go) |
action | pinDigest | -> `0aaccfd` |
|
[codecov/codecov-action](https://redirect.github.com/codecov/codecov-action)
| action | pinDigest | -> `b9fd7d1` |
|
[goreleaser/goreleaser-action](https://redirect.github.com/goreleaser/goreleaser-action)
| action | pinDigest | -> `9c156ee` |
|
[ietf-tools/semver-action](https://redirect.github.com/ietf-tools/semver-action)
| action | pinDigest | -> `778d1d5` |
|
[rickstaa/action-create-tag](https://redirect.github.com/rickstaa/action-create-tag)
| action | pinDigest | -> `a1c7777` |
|
[super-linter/super-linter](https://redirect.github.com/super-linter/super-linter)
| action | pinDigest | -> `1fa6ba5` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/get-eventually/go-eventually).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjcuMyIsInVwZGF0ZWRJblZlciI6IjM5LjIyNy4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/lint.yml

@@ -48,13 +48,13 @@ jobs:
       statuses: write
     steps:
       - name: Checkout source code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           # Full git history is needed to get a proper
           # list of changed files within `super-linter`
           fetch-depth: 0
       - name: Run super-linter
-        uses: super-linter/super-linter@v6
+        uses: super-linter/super-linter@1fa6ba58a88783e9714725cf89ac26d53e80c148 # v6
         env:
           VALIDATE_ALL_CODEBASE: false
           DEFAULT_BRANCH: main

.github/workflows/release.yml

@@ -20,20 +20,20 @@ jobs:
       contents: write
     steps:
       - name: Checkout source code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           # Using this to pick up the latest tag.
           fetch-depth: 0
       - name: Get next version
         id: semver
-        uses: ietf-tools/semver-action@v1
+        uses: ietf-tools/semver-action@778d1d5b7af80aa43f50104116b8363e7fc0d1ef # v1
         with:
           token: ${{ github.token }}
           branch: main
           minorList: 'major, breaking'
           patchList: 'feat, fix, bugfix, perf, refactor, test, tests, doc, docs'
       - name: Push new version tag
-        uses: rickstaa/action-create-tag@v1
+        uses: rickstaa/action-create-tag@a1c7777fcb2fee4f19b0f283ba888afa11678b72 # v1
         if: ${{ contains(github.ref, 'main') }}  # only push tags if on main branch.
         with:
           tag: ${{ steps.semver.outputs.next }}
@@ -46,15 +46,15 @@ jobs:
     needs: [tag]
     steps:
       - name: Checkout source code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5
         with:
           go-version: '1.21'
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@9c156ee8a17a598857849441385a2041ef570552 # v6
         with:
           distribution: goreleaser
           version: latest

.github/workflows/test.yml

@@ -32,7 +32,7 @@ jobs:
         run: make go.test
         shell: nix develop --quiet -c bash -e {0}
       - name: Upload coverage report
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: ./coverage.txt