chore(deps): pin dependencies

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/php-tests.yml

@@ -18,10 +18,10 @@ jobs:
                     - { php-version: 8.4, dependencies: highest, coverage: pcov, with_coverage: false, allow-fail: true }
         steps:
             -   name: "Checkout"
-                uses: "actions/checkout@v4.2.2"
+                uses: "actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683" # v4.2.2
 
             -   name: "Install PHP"
-                uses: "shivammathur/setup-php@2.35.1"
+                uses: "shivammathur/setup-php@2282b6a082fc605c8320908a4cca3a5d1ca6c6fe" # 2.35.1
                 with:
                     coverage: "${{ matrix.coverage }}"
                     ini-values: display_errors=On, display_startup_errors=On, error_reporting=32767
@@ -37,17 +37,17 @@ jobs:
                 run: "composer validate --ansi --strict"
 
             -   name: "Determine composer cache directory"
-                uses: "ergebnis/.github/actions/composer/determine-cache-directory@1.9.3"
+                uses: "ergebnis/.github/actions/composer/determine-cache-directory@b7a813b437712bae6ea583a4071c631d2d8bee6d" # 1.9.3
 
             -   name: "Cache dependencies installed with composer"
-                uses: "actions/cache@v4.2.3"
+                uses: "actions/cache@5a3ec84eff668545956fd18022155c47e93e2684" # v4.2.3
                 with:
                     path: "${{ env.COMPOSER_CACHE_DIR }}"
                     key: "php-${{ matrix.php-version }}-composer-${{ matrix.dependencies }}-${{ hashFiles('composer.lock') }}"
                     restore-keys: "php-${{ matrix.php-version }}-composer-${{ matrix.dependencies }}-"
 
             -   name: "Install ${{ matrix.dependencies }} dependencies with composer"
-                uses: "ergebnis/.github/actions/composer/install@1.9.3"
+                uses: "ergebnis/.github/actions/composer/install@b7a813b437712bae6ea583a4071c631d2d8bee6d" # 1.9.3
                 with:
                     dependencies: "${{ matrix.dependencies }}"
 

.github/workflows/release.yml

@@ -19,9 +19,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Semantic Release
-        uses: cycjimmy/semantic-release-action@v4.2.2
+        uses: cycjimmy/semantic-release-action@16ca923e6ccbb50770c415a0ccd43709a8c5f7a4 # v4.2.2
         with:
           tag_format: ${version}
           branches: |