Pin dependencies

.github/workflows/ci.yml

@@ -31,19 +31,19 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout current branch (full)
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
         with:
           fetch-depth: 0
 
       - name: Setup Java (temurin@11)
         if: matrix.java == 'temurin@11'
-        uses: actions/setup-java@v2
+        uses: actions/setup-java@91d3aa4956ec4a53e477c4907347b5e3481be8c9 # v2
         with:
           distribution: temurin
           java-version: 11
 
       - name: Cache sbt
-        uses: actions/cache@v2
+        uses: actions/cache@8492260343ad570701412c2f464a5877dc76bace # v2
         with:
           path: |
             ~/.sbt
@@ -55,7 +55,7 @@ jobs:
           key: ${{ runner.os }}-sbt-cache-v2-${{ hashFiles('**/*.sbt') }}-${{ hashFiles('project/build.properties') }}
 
       - name: Install node 16
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
           node-version: 16
 
@@ -65,13 +65,13 @@ jobs:
       - name: Get 1.0.x-SNAPSHOTS versionIds
         id: version
         if: github.ref == 'refs/heads/1.0.x'
-        uses: castlabs/[email protected]
+        uses: castlabs/get-package-version-id-action@61097d3d0b65fa880de6de674e8b70e1fff6730b # v2.0
         with:
           version: 1.0.x-SNAPSHOT
 
       - name: Deleting 1.0.x-SNAPSHOTS versions
         if: ${{ github.ref == 'refs/heads/1.0.x' && steps.version.outputs.ids != '' }}
-        uses: actions/delete-package-versions@v2
+        uses: actions/delete-package-versions@000223ef3eaa3505c63d4c610f57ef103bcab46d # v2
         with:
           package-version-ids: ${{ steps.version.outputs.ids }}