Merge pull request #55 from jellyfin/renovate/pin-dependencies

.github/workflows/release-build.yaml

@@ -409,7 +409,7 @@ jobs:
             fi
 
       - name: "Store artifact for next stage"
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4
         with:
           name: windows-x64
           retention-days: 1
@@ -440,13 +440,13 @@ jobs:
           echo "JELLYFIN_VERSION=$cleanVersion" | Out-File -FilePath $env:GITHUB_ENV -Append
 
       - name: "Fetch artifact from previous stage"
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
         working-directory: ./jellyfin-server-windows
         with:
           name: windows-x64
 
       - name: "Clone UX repository"
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         working-directory: ./jellyfin-server-windows
         with:
           repository: jellyfin/jellyfin-ux
@@ -483,7 +483,7 @@ jobs:
           Rename-Item -Path .\jellyfin_*_windows-x64.exe -NewName ("jellyfin_${{ env.JELLYFIN_VERSION }}_windows-x64.exe")
         
       - name: "Store artifact for next stage"
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4
         with:
           name: windows-installer-x64
           retention-days: 1
@@ -512,7 +512,7 @@ jobs:
           fi
 
       - name: "Fetch artifact from previous stage"
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
         with:
           name: windows-installer-x64