GHA: pin dependencies

Closes #13712

diff --git a/.github/workflows/non-native.yml b/.github/workflows/non-native.yml
index d64fb58c2b402eff07c2c1b50a888e7da1ccfff8..eb019a5d53d38545e7df77db60936d9d10b31b2b 100644 (file)
--- a/.github/workflows/non-native.yml
+++ b/.github/workflows/non-native.yml
@@ -48,9 +48,9 @@ jobs:
       matrix:
         arch: ['x86_64']
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
       - name: 'cmake'
-        uses: cross-platform-actions/action@v0.24.0
+        uses: cross-platform-actions/action@b2e15da1e667187766fff4945d20b98ac7055576 # v0.24.0
         with:
           operating_system: 'netbsd'
           version: '10.0'
@@ -82,9 +82,9 @@ jobs:
       matrix:
         arch: ['x86_64']
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
       - name: 'cmake'
-        uses: cross-platform-actions/action@v0.24.0
+        uses: cross-platform-actions/action@b2e15da1e667187766fff4945d20b98ac7055576 # v0.24.0
         with:
           operating_system: 'openbsd'
           version: '7.5'
@@ -120,10 +120,10 @@ jobs:
           - { build: 'cmake'    , arch: 'arm64', compiler: 'clang' }
       fail-fast: false
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
       - name: 'autotools'
         if: ${{ matrix.build == 'autotools' }}
-        uses: cross-platform-actions/action@v0.24.0
+        uses: cross-platform-actions/action@b2e15da1e667187766fff4945d20b98ac7055576 # v0.24.0
         with:
           operating_system: 'freebsd'
           version: '14.0'
@@ -150,7 +150,7 @@ jobs:
 
       - name: 'cmake'
         if: ${{ matrix.build == 'cmake' }}
-        uses: cross-platform-actions/action@v0.24.0
+        uses: cross-platform-actions/action@b2e15da1e667187766fff4945d20b98ac7055576 # v0.24.0
         with:
           operating_system: 'freebsd'
           version: '14.0'
@@ -181,9 +181,9 @@ jobs:
     runs-on: ubuntu-22.04
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
       - name: 'autotools'
-        uses: vmactions/omnios-vm@v1
+        uses: vmactions/omnios-vm@7c0ff6e623ee96d9fd7c4dc4cfc92bebd3c4f64a # v1
         with:
           usesh: true
           # https://pkg.omnios.org/r151048/core/en/index.shtml