chore(deps): pin dependencies (#382)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/ack.yml

@@ -17,6 +17,6 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: amannn/action-semantic-pull-request@v6
+      - uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release.yml

@@ -11,7 +11,7 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: astral-sh/setup-uv@v3
+      - uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5
 
       - name: Check out src from Git
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
@@ -31,7 +31,7 @@ jobs:
       - name: Attach dists to the release
         if: github.event_name == 'release'
         # cspell: ignore softprops
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@72f2c25fcb47643c292f7107632f7a47c1df5cd8 # v2
         with:
           name: ${{ github.event.release.tag_name }}
           files: dist/*

.github/workflows/tox.yml

@@ -60,7 +60,7 @@ jobs:
       - name: Wait for ack workflow to pass
         id: wait
         # cspell: ignore smartcontractkit chainlink
-        uses: smartcontractkit/chainlink-github-actions/utils/wait-for-workflows@b49a9d04744b0237908831730f8553f26d73a94b # v2.3.17
+        uses: smartcontractkit/chainlink-github-actions/utils/wait-for-workflows@1ada5d85b0de3439a0ba238210d40605b5ed6704 # v2.3.32
         with:
           max-timeout: "120"
           polling-interval: "15"
@@ -128,7 +128,7 @@ jobs:
           && sudo apt-get install -y libvirt-dev zsh
 
       - name: Install mise
-        uses: jdx/mise-action@c37c93293d6b742fc901e1406b8f764f6fb19dac # v2
+        uses: jdx/mise-action@ca0c5fc9c8a8386dae8ba5d37608a083a307991c # v3
 
       - name: Set up Python ${{ matrix.python_version || '3.10' }}
         if: "!contains(matrix.shell, 'wsl')"
@@ -223,7 +223,7 @@ jobs:
 
       - name: Upload coverage data
         if: ${{ needs.build.result != 'skipped' }}
-        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5
+        uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00 # v5
         with:
           name: ${{ matrix.name }}
           # verbose: true # optional (default = false)

.pre-commit-config.yaml

@@ -80,7 +80,7 @@ repos:
 
   # keep at bottom as these are slower
   - repo: https://github.com/astral-sh/uv-pre-commit
-    rev: 0.8.11
+    rev: 0.8.12
     hooks:
       - id: uv-sync
       - id: uv-lock