AO-73 Pin github action versions

Author: gamingrobot

.github/workflows/oob-update.yaml

@@ -9,10 +9,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Setup Helm
-        uses: azure/setup-helm@v3
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-      - uses: actions/checkout@v3
+        uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v4.2.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Validate Event
         id: validate-event
         run: |
@@ -53,7 +51,7 @@ jobs:
 
       - name: Download Chart
         id: download-artifact
-        uses: dawidd6/action-download-artifact@v2
+        uses: dawidd6/action-download-artifact@07ab29fd4a977ae4d2b275087cf67563dfdf0295 # v9
         with:
           github_token: ${{ secrets.GH_PR_WRITE_PAT }}
           repo: ${{ steps.validate-event.outputs.repo }}
@@ -81,7 +79,7 @@ jobs:
         shell: pwsh
 
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v4
+        uses: peter-evans/create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f # v7.0.6
         id: create-pr
         with:
           add-paths: |
@@ -106,10 +104,8 @@ jobs:
             oob-update
           token: ${{ secrets.GH_PR_WRITE_PAT }}
 
-      - uses: peter-evans/enable-pull-request-automerge@v2
+      - name: Enable Pull Request Automerge
         if: steps.create-pr.outputs.pull-request-operation == 'created'
-        with:
-          # Uses the dispatch service user, using the dotnet PAT.
-          token: ${{ secrets.GH_PR_WRITE_PAT }}
-          pull-request-number: ${{ steps.create-pr.outputs.pull-request-number }}
-          merge-method: rebase
+        run: gh pr merge --rebase --auto "${{ steps.create-pr.outputs.pull-request-number }}"
+        env:
+          GH_TOKEN: ${{ secrets.GH_PR_WRITE_PAT }}

.github/workflows/pipeline.yaml

@@ -12,23 +12,21 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Setup Helm
-        uses: azure/setup-helm@v3
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+        uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v4.2.0
       - name: Setup Node
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
         with:
           node-version: lts/*
 
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Stage Charts
         run: |
           ./build.ps1 -Output ./dist -ChartRepositoryUrl "https://contrastsecurity.dev/helm-charts"
         shell: pwsh
 
       - name: Upload Pages Artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3.0.1
         with:
           path: ./dist
   publish:
@@ -42,4 +40,4 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Deploy to GitHub Pages
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5