ci: Pin actions to specific versions

Author: weppos

.github/workflows/ci.yml

@@ -23,12 +23,12 @@ jobs:
     runs-on: ubuntu-latest
     name: Check
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - uses: dtolnay/rust-toolchain@stable
         with:
           toolchain: ${{ env.MSRV }}
           components: clippy, rustfmt
-      - uses: Swatinem/rust-cache@v2
+      - uses: Swatinem/rust-cache@v2.9.1
       - name: Clippy check
         run: cargo clippy --workspace --all-targets --all-features -- -D warnings
       - name: rustfmt
@@ -37,9 +37,9 @@ jobs:
   check-docs:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - uses: dtolnay/rust-toolchain@stable
-    - uses: Swatinem/rust-cache@v2
+    - uses: Swatinem/rust-cache@v2.9.1
     - name: cargo doc
       env:
         RUSTDOCFLAGS: "-D rustdoc::all -A rustdoc::private-doc-tests"
@@ -54,21 +54,21 @@ jobs:
           - stable
           - '1.86'
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - uses: taiki-e/install-action@protoc
     - uses: dtolnay/rust-toolchain@master
       with:
         toolchain: ${{ matrix.rust }}
-    - uses: Swatinem/rust-cache@v2
+    - uses: Swatinem/rust-cache@v2.9.1
     - name: Run tests
       run: cargo test --workspace --all-features --all-targets
 
   test-docs:
     needs: check
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - uses: dtolnay/rust-toolchain@stable
-    - uses: Swatinem/rust-cache@v2
+    - uses: Swatinem/rust-cache@v2.9.1
     - name: Run doc tests
       run: cargo test --all-features --doc

.github/workflows/release.yml

@@ -27,6 +27,6 @@ jobs:
     name: Publish Client
     needs: wait-for-ci
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - uses: dtolnay/rust-toolchain@stable
       - run: cargo publish --token ${{ secrets.CRATES_REGISTRY_TOKEN }}

.github/workflows/sync-test-fixtures.yml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
       - name: Sync fixtures
         id: sync
         run: |
@@ -20,7 +20,7 @@ jobs:
           rsync -a --delete "$TMP_DIR/dnsimple-developer-main/fixtures/v2/" tests/fixtures/v2/
           echo "now=$(date +'%Y-%m-%d %H:%M:%S')" >> "$GITHUB_OUTPUT"
       - name: Create PR with synced fixtures
-        uses: peter-evans/create-pull-request@v8
+        uses: peter-evans/create-pull-request@v8.1.1
         with:
           sign-commits: true
           add-paths: tests/fixtures/v2