update automation dependencies to use hashes #385

	name: Pull request pipeline
	on:
	pull_request:
	branches:
	- main
	workflow_dispatch:

	# for security reasons the github actions are pinned to specific SHAs
	jobs:
	link_checker:
	name: Link checker
	runs-on: ubuntu-24.04
	steps:
	- name: Checkout markdown
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd

	- name: Link Checker
	uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411
	with:
	# skip the jekyll files under '_includes' directory
	args: >-
	--verbose
	--no-progress
	--max-retries 1
	--retry-wait-time 10
	--exclude-path './_includes/*.html'
	'./release/*/.md'
	'./release/*.md'
	'./release-es/*.md'
	'./release-es/*/.md'
	'*.md'
	fail: true
	env:
	GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

	md_linter:
	name: Lint markdown
	runs-on: ubuntu-24.04
	steps:
	- name: Checkout markdown
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd

	- name: Lint markdown
	uses: DavidAnson/markdownlint-cli2-action@07035fd053f7be764496c0f8d8f9f41f98305101
	with:
	config: '.markdownlint.yaml'
	globs: '*.md'

	check_en_spelling:
	name: Check spelling
	runs-on: ubuntu-24.04
	steps:
	- name: Checkout markdown
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd

	- name: Spell check
	uses: rojopolis/spellcheck-github-actions@e3cd8e9aec4587ec73bc0e60745aafd45c37aa2e
	with:
	config_path: .spellcheck.yaml

Provide feedback