GHA: pin dependencies

For recently added actions in checkdocs.yml and windows.yml

Closes #15722

diff --git a/.github/workflows/checkdocs.yml b/.github/workflows/checkdocs.yml
index 7484f74ec34c9a3e4fea88c0395537a6af0744df..0f1915762509c7ee952c1759f30fe0424adaeecb 100644 (file)
--- a/.github/workflows/checkdocs.yml
+++ b/.github/workflows/checkdocs.yml
@@ -96,7 +96,7 @@ jobs:
         run: find docs/cmdline-opts -name "*.md" ! -name "_*" ! -name MANPAGE.md -print0 | xargs -0 -n1 .github/scripts/cleancmd.pl
 
       - name: Run linkspector
-        uses: umbrelladocs/action-linkspector@v1
+        uses: umbrelladocs/action-linkspector@fc382e19892aca958e189954912fe379a8df270c # v1
         with:
           github_token: ${{ secrets.github_token }}
           reporter: github-pr-review

diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml
index d23befbbf5eb66f76471d391519350f96a0fc8be..cdcdcfc44397e8bb36d0f003e2e385b615cae92c 100644 (file)
--- a/.github/workflows/windows.yml
+++ b/.github/workflows/windows.yml
@@ -664,7 +664,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: 'vcpkg cache setup'
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
         with:
           script: |
             core.exportVariable('ACTIONS_CACHE_URL', process.env.ACTIONS_CACHE_URL || '');