fix(deps): update all dependencies

Author: renovate[bot]

.github/workflows/add-issues-to-project.yaml

@@ -10,7 +10,7 @@ jobs:
     name: Add issue to project
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/add-to-project@v1.0.2
+      - uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2
         with:
           project-url: https://github.com/orgs/famedly/projects/50
           github-token: ${{ secrets.ADD_ISSUE_TO_PROJECT_PAT }}

.github/workflows/release.yml

@@ -26,10 +26,10 @@ jobs:
             runner: arm-ubuntu-latest-8core
             asset_name: ${{ github.event.repository.name }}-linux-aarch64-latest
     runs-on: ${{ matrix.runner }}
-    container: registry.famedly.net/docker-oss/rust-container:nightly
+    container: registry.famedly.net/docker-oss/rust-container:nightly@sha256:47bd1ead2f51c59fc357dfb03ea8ac3a9a2e4fbe11a3edf75e544afb1f6baf4f
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
 
       - name: Set up Rust
         uses: famedly/backend-build-workflows/.github/actions/rust-prepare@main
@@ -39,13 +39,13 @@ jobs:
           gitlab_pass: ${{ secrets.GITLAB_PASS }}
 
       - name: Caching
-        uses: Swatinem/rust-cache@68b3cb7503c78e67dae8373749990a220eb65352
+        uses: Swatinem/rust-cache@94b28bf00e42c2b783e7dd289d30da129b46838b
         with:
           cache-on-failure: true
           cache-all-crates: true
 
       - name: Install additional cargo tooling
-        uses: taiki-e/cache-cargo-install-action@3d5e3efe44b020826abe522d18cb4457042280ef
+        uses: taiki-e/cache-cargo-install-action@c3a809e766eccfe7ffbd1c87907d83b26ac07e5b
         with:
           tool: cargo-auditable
 
@@ -58,12 +58,12 @@ jobs:
         run: "mv target/release/${{ github.event.repository.name }} target/release/${{ matrix.asset_name }}"
 
       - name: Attest
-        uses: actions/attest-build-provenance@v1
+        uses: actions/attest-build-provenance@ef244123eb79f2f7a7e75d99086184180e6d0018 # v1
         with:
           subject-path: '${{ github.workspace }}/target/release/${{ matrix.asset_name }}'
 
       - name: Upload binary
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: release-${{ matrix.asset_name }}
           path: '${{ github.workspace }}/target/release/${{ matrix.asset_name }}'
@@ -74,10 +74,10 @@ jobs:
       contents: read
       attestations: write
     runs-on: ubuntu-latest
-    container: registry.famedly.net/docker-oss/rust-container:nightly
+    container: registry.famedly.net/docker-oss/rust-container:nightly@sha256:47bd1ead2f51c59fc357dfb03ea8ac3a9a2e4fbe11a3edf75e544afb1f6baf4f
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
 
       - name: Set up Rust
         uses: famedly/backend-build-workflows/.github/actions/rust-prepare@main
@@ -87,18 +87,18 @@ jobs:
           gitlab_pass: ${{ secrets.GITLAB_PASS }}
 
       - name: Caching
-        uses: Swatinem/rust-cache@68b3cb7503c78e67dae8373749990a220eb65352
+        uses: Swatinem/rust-cache@94b28bf00e42c2b783e7dd289d30da129b46838b
         with:
           cache-on-failure: true
           cache-all-crates: true
 
       - name: Install cargo-sbom
-        uses: taiki-e/cache-cargo-install-action@3d5e3efe44b020826abe522d18cb4457042280ef
+        uses: taiki-e/cache-cargo-install-action@c3a809e766eccfe7ffbd1c87907d83b26ac07e5b
         with:
           tool: cargo-sbom
 
       - name: Install cyclonedx-rust-cargo
-        uses: taiki-e/cache-cargo-install-action@3d5e3efe44b020826abe522d18cb4457042280ef
+        uses: taiki-e/cache-cargo-install-action@c3a809e766eccfe7ffbd1c87907d83b26ac07e5b
         with:
           tool: cargo-cyclonedx
 
@@ -110,21 +110,21 @@ jobs:
         run: cargo cyclonedx -f json
 
       - name: Attest SPDX SBOM
-        uses: actions/attest-build-provenance@v1
+        uses: actions/attest-build-provenance@ef244123eb79f2f7a7e75d99086184180e6d0018 # v1
         with:
           subject-path: '${{ github.workspace }}/${{ github.event.repository.name }}.spdx.json'
       - name: Attest CycloneDX SBOM
-        uses: actions/attest-build-provenance@v1
+        uses: actions/attest-build-provenance@ef244123eb79f2f7a7e75d99086184180e6d0018 # v1
         with:
           subject-path: '${{ github.workspace }}/${{ github.event.repository.name }}.cdx.json'
 
       - name: Upload SPDX SBOM
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: release-sbom-spdx
           path: '${{ github.workspace }}/${{ github.event.repository.name}}.spdx.json'
       - name: Upload CycloneDX SBOM
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: release-sbom-cdx
           path: '${{ github.workspace }}/${{ github.event.repository.name }}.cdx.json'
@@ -134,14 +134,14 @@ jobs:
     needs: [build, sbom]
     steps:
       - name: Download artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           pattern: release-*
           path: artifacts
           merge-multiple: true
 
       - name: Create release
-        uses: softprops/action-gh-release@79721680dfc87fb0f44dfe65df68961056d55c38
+        uses: softprops/action-gh-release@19cd0bcd2b95a5f9e0aab8377b3cae33e51c2234
         with:
           files: artifacts/*
           prerelease: "${{ contains(github.ref_name, 'rc') }}"

.github/workflows/rust-workflow.yml

@@ -19,11 +19,11 @@ concurrency:
 # Defined CI jobs.
 jobs:
   simple-checks:
-    container: registry.famedly.net/docker-oss/rust-container:nightly
+    container: registry.famedly.net/docker-oss/rust-container:nightly@sha256:47bd1ead2f51c59fc357dfb03ea8ac3a9a2e4fbe11a3edf75e544afb1f6baf4f
     runs-on: ubuntu-latest
     steps:
     - name: Checkout current repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
 
     - uses: famedly/backend-build-workflows/.github/actions/rust-prepare@main
       with:
@@ -32,7 +32,7 @@ jobs:
         gitlab_pass: ${{ secrets.GITLAB_PASS }}
 
     - name: Caching
-      uses: Swatinem/rust-cache@68b3cb7503c78e67dae8373749990a220eb65352
+      uses: Swatinem/rust-cache@94b28bf00e42c2b783e7dd289d30da129b46838b
       with:
         cache-on-failure: true
         cache-all-crates: true
@@ -61,7 +61,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout current repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
 
     - uses: famedly/backend-build-workflows/.github/actions/rust-prepare@main
       with:
@@ -73,7 +73,7 @@ jobs:
       run: rustup component add llvm-tools-preview --toolchain stable-x86_64-unknown-linux-gnu
 
     - name: Caching
-      uses: Swatinem/rust-cache@68b3cb7503c78e67dae8373749990a220eb65352
+      uses: Swatinem/rust-cache@94b28bf00e42c2b783e7dd289d30da129b46838b
       with:
         cache-on-failure: true
         cache-all-crates: true
@@ -96,12 +96,12 @@ jobs:
         docker compose --project-directory ./tests/environment logs
 
     - name: Codecov - Upload coverage
-      uses: codecov/codecov-action@v4
+      uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4
       with:
         token: ${{secrets.CODECOV_TOKEN}}
         files: lcov.info
 
     - name: Codecov - Upload test results
-      uses: codecov/test-results-action@v1
+      uses: codecov/test-results-action@47f89e9acb64b76debcd5ea40642d25a4adced9f # v1
       with:
         token: ${{secrets.CODECOV_TOKEN}}