chore(deps): pin dependencies (#288)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-node](https://redirect.github.com/actions/setup-node) |
action | pinDigest | -> `39370e3` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | digest | `df409f7` -> `48ab28a` |
|
[peter-evans/create-pull-request](https://redirect.github.com/peter-evans/create-pull-request)
| action | pinDigest | -> `5e91468` |
| [pnpm/action-setup](https://redirect.github.com/pnpm/action-setup) |
action | pinDigest | -> `fe02b34` |
|
[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)
| action | patch | `v2.46.8` -> `v2.46.20` |

---

### Release Notes

<details>
<summary>taiki-e/install-action (taiki-e/install-action)</summary>

###
[`v2.46.20`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.46.20):
2.46.20

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.46.19...v2.46.20)

-   Update `dprint@latest` to 0.48.0.

###
[`v2.46.19`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.46.19):
2.46.19

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.46.18...v2.46.19)

-   Update `cargo-llvm-cov@latest` to 0.6.15.

-   Update `cargo-lambda@latest` to 1.6.1.

###
[`v2.46.18`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.46.18):
2.46.18

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.46.17...v2.46.18)

-   Update `wasmtime@latest` to 28.0.0.

###
[`v2.46.17`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.46.17):
2.46.17

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.46.16...v2.46.17)

-   Update `release-plz@latest` to 0.3.112.

###
[`v2.46.16`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.46.16):
2.46.16

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.46.15...v2.46.16)

-   Update `osv-scanner@latest` to 1.9.2.

###
[`v2.46.15`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.46.15):
2.46.15

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.46.14...v2.46.15)

-   Update `protoc@latest` to 3.29.2.

###
[`v2.46.14`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.46.14):
2.46.14

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.46.13...v2.46.14)

-   Update `cargo-nextest@latest` to 0.9.87.

###
[`v2.46.13`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.46.13):
2.46.13

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.46.12...v2.46.13)

-   Update `espup@latest` to 0.14.0.

###
[`v2.46.12`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.46.12):
2.46.12

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.46.11...v2.46.12)

-   Update `typos@latest` to 1.28.4.

###
[`v2.46.11`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.46.11):
2.46.11

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.46.10...v2.46.11)

-   Update `cargo-zigbuild@latest` to 0.19.7.

###
[`v2.46.10`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.46.10):
2.46.10

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.46.9...v2.46.10)

-   Update `cargo-zigbuild@latest` to 0.19.6.

-   Update `cargo-binstall@latest` to 1.10.17.

###
[`v2.46.9`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.46.9):
2.46.9

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.46.8...v2.46.9)

-   Update `syft@latest` to 1.18.1.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 11am on monday" in timezone
Asia/Shanghai, Automerge - "before 11am on monday" in timezone
Asia/Shanghai.

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/eslint-plugin-oxlint).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44MC4wIiwidXBkYXRlZEluVmVyIjoiMzkuODAuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.github/actions/pnpm/action.yml

@@ -3,9 +3,9 @@ name: pnpm
 runs:
   using: composite
   steps:
-    - uses: pnpm/[email protected]
+    - uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0
 
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
       with:
         node-version-file: .node-version
         registry-url: 'https://registry.npmjs.org'

.github/workflows/bump_oxlint.yml

@@ -38,7 +38,7 @@ jobs:
           OXLINT_VERSION: ${{ inputs.version }}
         run: npm version ${OXLINT_VERSION} --no-git-tag-version
 
-      - uses: peter-evans/create-pull-request@v7
+      - uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7
         with:
           # bot account with PAT required for triggering workflow runs
           # See https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#triggering-further-workflow-runs

.github/workflows/ci_security.yml

@@ -25,7 +25,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: taiki-e/install-action@8c39981484df4e7ba41af8e8e078ac546d5e1b11 # v2.46.8
+      - uses: taiki-e/install-action@8484225d9734e230a8bf38421a4ffec1cc249372 # v2.46.20
         with:
           tool: zizmor
 
@@ -35,7 +35,7 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3
+        uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3
         with:
           sarif_file: results.sarif
           category: zizmor