Pin dependencies (#29)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.github/workflows/update-reports.yml

@@ -11,54 +11,54 @@ jobs:
     env:
       BUILD_DIR: public
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
       - name: Set up JDK
-        uses: joschi/[email protected]
+        uses: joschi/setup-jdk@fdc8726d3eaee700a67647704c396f71fe773eed # v2.5.1
         with:
           java-version: 11
-      - uses: actions/cache@v3
+      - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
         with:
           path: db
           key: ${{ runner.os }}-db
           restore-keys: |
             ${{ runner.os }}-db
-      - uses: actions/cache@v3
+      - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
         with:
           path: installed
           key: ${{ runner.os }}-installed
           restore-keys: |
             ${{ runner.os }}-installed
-      - uses: actions/cache@v3
+      - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
         with:
           path: src
           key: ${{ runner.os }}-src
           restore-keys: |
             ${{ runner.os }}-src
-      - uses: actions/cache@v3
+      - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
         with:
           path: api_dump
           key: ${{ runner.os }}-api_dump
           restore-keys: |
             ${{ runner.os }}-api_dump
-      - uses: actions/cache@v3
+      - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
         with:
           path: archives_report
           key: ${{ runner.os }}-archives_report
           restore-keys: |
             ${{ runner.os }}-archives_report
-      - uses: actions/cache@v3
+      - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
         with:
           path: compat_report
           key: ${{ runner.os }}-compat_report
           restore-keys: |
             ${{ runner.os }}-compat_report
-      - uses: actions/cache@v3
+      - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
         with:
           path: package_diff
           key: ${{ runner.os }}-package_diff
           restore-keys: |
             ${{ runner.os }}-package_diff
-      - uses: actions/cache@v3
+      - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
         with:
           path: timeline
           key: ${{ runner.os }}-timeline
@@ -69,7 +69,7 @@ jobs:
       - name: Update profiles
         run: bin/update-profiles.sh
       - name: Commit updated profiles
-        uses: github-actions-x/[email protected]
+        uses: github-actions-x/commit@722d56b8968bf00ced78407bbe2ead81062d8baa # v2.9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           push-branch: 'master'
@@ -79,7 +79,7 @@ jobs:
         run: bin/update-reports.sh
       - name: Deploy
         if: success()
-        uses: crazy-max/[email protected]
+        uses: crazy-max/ghaction-github-pages@c05ee637ec73429400a359430db8e5629f3f2564 # v4.0.0
         with:
           target_branch: gh-pages
           build_dir: ${{ env.BUILD_DIR }}