fix(deps): pin dependencies

Author: renovate[bot]

.github/workflows/add-issues-to-project.yaml

@@ -14,7 +14,7 @@ jobs:
     name: Add issue to project
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/add-to-project@v1.0.2
+      - uses: actions/add-to-project@5afcf98fcd03f1c2f92c3c83f58ae24323cc57fd # v2.0.0
         with:
           project-url: https://github.com/orgs/famedly/projects/50
           github-token: ${{ secrets.ADD_ISSUE_TO_PROJECT_PAT }}

.github/workflows/rust-workflow.yml

@@ -26,11 +26,11 @@ jobs:
   compliance:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: REUSE Compliance Check
-        uses: fsfe/reuse-action@v5
+        uses: fsfe/reuse-action@676e2d560c9a403aa252096d99fcab3e1132b0f5 # v6
       - name: Dependency license check
-        uses: EmbarkStudios/cargo-deny-action@v2
+        uses: EmbarkStudios/cargo-deny-action@6c8f9facfa5047ec02d8485b6bf52b587b7777d1 # v2
         with:
           command: check bans licenses sources
 

Cargo.lock

@@ -28,7 +28,7 @@ paste = { version = "1.0.0", optional = true }
 reqwest = { version = "0.13.0", optional = true }
 schemars = { version = "1.2.0", optional = true }
 serde = { version = "1.0.194", features = ["derive"], optional = true }
-thiserror = { version = "1.0.0", optional = true }
+thiserror = { version = "2.0.0", optional = true }
 time = { version = "0.3.0", optional = true }
 tracing = { version = "0.1.0", optional = true }
 url = { version = "2.5.0", features = ["serde"], optional = true }