ci: Pin actions to commit hash

Author: RandomByte

.github/workflows/github-ci.yml

@@ -53,7 +53,8 @@ jobs:
       run: npm run test:unit:coverage
 
     - name: Send report to Coveralls for package @ui5/middleware-code-coverage
-      uses: coverallsapp/github-action@v2.3.7
+      uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b # v2.3.6
+      continue-on-error: true # Do not fail the job if coverage reporting fails (e.g. service is down)
       with:
         flag-name: middleware-code-coverage
         base-path: ./packages/middleware-code-coverage

.github/workflows/release-please.yml

@@ -24,7 +24,7 @@ jobs:
       releases_created: ${{steps.release.outputs.releases_created}}
       paths_released: ${{steps.release.outputs.paths_released}}
     steps:
-    - uses: googleapis/release-please-action@v4
+    - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
       id: release
       with:
         token: ${{secrets.GH_OPENUI5BOT}}

.github/workflows/reuse-compliance.yml

@@ -17,4 +17,4 @@ jobs:
     steps:
     - uses: actions/checkout@v6
     - name: Execute REUSE Compliance Check
-      uses: fsfe/reuse-action@v6
+      uses: fsfe/reuse-action@676e2d560c9a403aa252096d99fcab3e1132b0f5 # v6.0.0