Pin dependencies

Author: renovate[bot]

.github/workflows/github-ip-ranges.yaml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.0
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
@@ -48,7 +48,7 @@ jobs:
 
       - if: steps.ip-check.outputs.NEW_IP_RANGES == 'true'
         name: Open Pull Request if IP Ranges Have Changed
-        uses: ExpediaGroup/github-helpers@v1
+        uses: ExpediaGroup/github-helpers@v1.90.0
         with:
           helper: create-pr
           title: "fix: update Github IP ranges"

.github/workflows/publish.yaml

@@ -11,10 +11,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.0
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.2.0
         with:
           bun-version-file: package.json
 
@@ -31,6 +31,6 @@ jobs:
         run: zip -r -qq proxy-lambda.zip build node_modules
 
       - name: Upload Release Assets
-        uses: softprops/action-gh-release@v3
+        uses: softprops/action-gh-release@v3.0.1
         with:
           files: proxy-lambda.zip

.github/workflows/release.yaml

@@ -10,10 +10,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.0
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.2.0
         with:
           bun-version-file: package.json
 

.github/workflows/test.yaml

@@ -10,10 +10,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.0
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.2.0
         with:
           bun-version-file: package.json
 
@@ -35,7 +35,7 @@ jobs:
   docs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v7.0.0
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
@@ -51,7 +51,7 @@ jobs:
     needs: docs
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v7.0.0
 
       - name: Read .terraform-version
         run: echo TF_VERSION=`cat .terraform-version` >> $GITHUB_ENV
@@ -71,7 +71,7 @@ jobs:
         uses: dflook/terraform-fmt@v2.2.3
 
       - name: Terraform Lint
-        uses: reviewdog/action-tflint@v1
+        uses: reviewdog/action-tflint@v1.25.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           fail_on_error: true