ci(github-action): pin dependencies

.github/actions/publish-folder-to-pages/action.yaml

@@ -40,7 +40,7 @@ runs:
 
     - name: Upload gh-pages artifact
       id: upload-artifact
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
       with:
         name: ${{ inputs.artifactName }}
         path: ${{ runner.temp }}/artifact.tar
@@ -49,13 +49,13 @@ runs:
 
     - name: Deploy to GitHub Pages
       id: deploy-gh-pages
-      uses: actions/deploy-pages@v4
+      uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5
       with:
         artifact_name: ${{ inputs.artifactName }}
 
     - name: Clean up artifact
       if: ${{ inputs.deleteArtifactAfterPublish == 'true' }}
-      uses: joernott/rm-artifact@v1
+      uses: joernott/rm-artifact@ddae76700af6756a6dbb164be87d62d25d85febd # v1.0.4
       with:
         name: ${{ inputs.artifactName }}
         useGlob: false

.github/workflows/chart-release-steps.yaml

@@ -82,7 +82,7 @@ jobs:
       # ----------------------------
       - name: Get chart details
         id: chart-details
-        uses: bjw-s-labs/helm-charts-actions/get-chart-details@2025.2.0
+        uses: bjw-s-labs/helm-charts-actions/get-chart-details@591cde3b4648e4228e8097a39b1276c6b8824655
         with:
           path: src/charts/${{ inputs.chart }}
           validateChartYaml: true
@@ -131,7 +131,7 @@ jobs:
       # Package Helm chart
       # ----------------------------
       - name: Dereference JSON schema before packaging
-        uses: bjw-s-labs/helm-charts-actions/dereference-json-schema@2025.2.0
+        uses: bjw-s-labs/helm-charts-actions/dereference-json-schema@591cde3b4648e4228e8097a39b1276c6b8824655
         with:
           schemaFile: "src/charts/${{ inputs.chart }}/values.schema.json"
           outputFile: "src/charts/${{ inputs.chart }}/values.schema.json"

.github/workflows/charts-lint.yaml

@@ -47,7 +47,7 @@ jobs:
 
       - name: Get chart details for PR
         id: chart-details-pr
-        uses: bjw-s-labs/helm-charts-actions/get-chart-details@2025.2.0
+        uses: bjw-s-labs/helm-charts-actions/get-chart-details@591cde3b4648e4228e8097a39b1276c6b8824655
         with:
           path: pull/charts/${{ matrix.chart }}
           validateChartYaml: true
@@ -55,7 +55,7 @@ jobs:
 
       - name: Get chart details for default branch
         id: chart-details-default
-        uses: bjw-s-labs/helm-charts-actions/get-chart-details@2025.2.0
+        uses: bjw-s-labs/helm-charts-actions/get-chart-details@591cde3b4648e4228e8097a39b1276c6b8824655
         with:
           path: default/charts/${{ matrix.chart }}
           allowChartToNotExist: true

.github/workflows/charts-test.yaml

@@ -145,7 +145,7 @@ jobs:
           helm: "${{ inputs.helmVersion }}"
 
       - name: Dereference JSON schema
-        uses: bjw-s-labs/helm-charts-actions/dereference-json-schema@2025.2.0
+        uses: bjw-s-labs/helm-charts-actions/dereference-json-schema@591cde3b4648e4228e8097a39b1276c6b8824655
         with:
           schemaFile: "charts/${{ matrix.chart }}/values.schema.json"
           outputFile: "charts/${{ matrix.chart }}/values.schema.json"