chore(deps): pin dependencies

.gitea/workflows/cd.yaml

@@ -89,12 +89,12 @@ jobs:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
         with:
           fetch-depth: 0
-      - uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@0.1.20
+      - uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@9ce866a51b59227917f423c09a3b65b00ccb0e2c # 0.1.20
         id: tag
         with:
           token: ${{ secrets.GITEA_TOKEN }}
           prerelease: ${{ github.event_name == 'workflow_dispatch' }}
-      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@0.0.2
+      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@1b3aa245ae86a83ddcb81f9b083a6b7e6b731837 # 0.0.2
         with:
           tag: ${{ steps.tag.outputs.new-tag }}
       - name: Set output