deps: pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
JetBrains/qodana-action	action	pinDigest	-> c96b39a
actions/attest-build-provenance	action	pinDigest	-> 5e9cb68
actions/checkout	action	pinDigest	-> 692973e
actions/setup-node	action	pinDigest	-> 1e60f62
actions/setup-python	action	pinDigest	-> 39cd149
codecov/codecov-action	action	pinDigest	-> e28ff12
docker/build-push-action	action	pinDigest	-> 1a16264
docker/login-action	action	pinDigest	-> 0d4c9c5
docker/metadata-action	action	pinDigest	-> 8e5442c
docker/setup-buildx-action	action	pinDigest	-> 4fd8129
gaurav-nelson/github-action-markdown-link-check	action	pinDigest	-> 5c5dfc0
github/codeql-action	action	pinDigest	-> b611370
gradle/actions	action	pinDigest	-> dbbdc27
ossf/scorecard-action	action	pinDigest	-> dc50aa9
test-summary/action	action	pinDigest	-> 31493c7
wagoid/commitlint-github-action	action	pinDigest	-> 7f0a61d

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 67.54%. Comparing base (d881059) to head (55712d4).
Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##               main    #8870   +/-   ##
=========================================
  Coverage     67.54%   67.54%           
  Complexity     1166     1166           
=========================================
  Files           244      244           
  Lines          7775     7775           
  Branches        865      865           
=========================================
  Hits           5252     5252           
  Misses         2167     2167           
  Partials        356      356           

Flag	Coverage Δ
funTest-non-docker	33.92% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[sschuberth]

Interesting, for some reason e.g. this was not pinned. Let's keep an eye on Renovate to pin this as well.