ci: pin varios actions to a proper semver version

.gitea/workflows/cd.yaml

@@ -18,9 +18,9 @@ jobs:
           fetch-depth: 0
       - name: Increment tag
         id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@41b7e04221df8a033bec841d40a097b76e5f67ff # 0.1.29
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@68d642a9f68c4c00b6809126707aceca432c5e75 # 0.1.25
         with:
           token: ${{ secrets.GITEA_TOKEN }}
-      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@3925c92fc33f3d2bc87d28d21ab691b7e6dd6cdf # 0.2.1
+      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@72551407e761ecdad9bfd421513a1f3b6f252234 # 0.1.2
         with:
           tag: ${{ steps.tag.outputs.new-tag }}

.gitea/workflows/prerelease.yaml

@@ -13,10 +13,10 @@ jobs:
           fetch-depth: 0
       - name: Increment tag
         id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@41b7e04221df8a033bec841d40a097b76e5f67ff # 0.1.29
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@68d642a9f68c4c00b6809126707aceca432c5e75 # 0.1.25
         with:
           token: ${{ secrets.GITEA_TOKEN }}
           prerelease: true
-      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@3925c92fc33f3d2bc87d28d21ab691b7e6dd6cdf # 0.2.1
+      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@72551407e761ecdad9bfd421513a1f3b6f252234 # 0.1.2
         with:
-          tag: ${{ steps.tag.outputs.new-tag }}
+          tag: ${{ steps.tag.outputs.new-tag }}

.gitea/workflows/run-tas.yaml

@@ -16,13 +16,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-trivy@a1a6564b312e3411516cf1a84cc30ac438b4d3ec # 1.4.1
+      - uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-trivy@d3dadf6c278b1e86c8f292844225e9c6de230c64 # 1.3.1
-      - uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-db@a1a6564b312e3411516cf1a84cc30ac438b4d3ec # 1.4.1
+      - uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-db@d3dadf6c278b1e86c8f292844225e9c6de230c64 # 1.3.1
       - env:
           TRIVY_CACHE_DIR: ${{ runner.temp }}/trivy
         run: |
           trivy config --cache-dir "$TRIVY_CACHE_DIR" --exit-code 0 --format sarif --output sarif.json .
-      - uses: https://gitea.t000-n.de/t.behrendt/tas-actions/tas-upload-sarif@5e1031a9eff4a83fc17d0893332ad896386c082f # 0.0.3
+      - uses: https://gitea.t000-n.de/t.behrendt/tas-actions/tas-upload-sarif@cd7a5213f75c28565a24fff5ce7f8161869fb813 # 0.0.2
         with:
           tas-base-url: ${{ vars.TAS_BASE_URL }}
           sarif-file: sarif.json