chore(deps): pin dependencies

| datasource | package      | from    | to      |
| ---------- | ------------ | ------- | ------- |
| npm        | autoprefixer | 10.4.21 | 10.4.21 |
| npm        | postcss      | 8.5.6   | 8.5.6   |
| npm        | postcss-cli  | 10.1.0  | 10.1.0  |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>

Author: renovate-sh-app[bot]

.github/workflows/release.yaml

@@ -243,7 +243,7 @@ jobs:
           # For example: add custom metadata, vulnerability scan results, etc.
 
       - name: Upload SBOMs as artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: sboms
           path: ./sboms/
@@ -269,7 +269,7 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Download SBOMs
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: sboms
           path: ./sboms/

config/manager/kustomization.yaml

@@ -15,4 +15,4 @@ configMapGenerator:
 images:
 - name: controller
   newName: ghcr.io/grafana/grafana-operator
-  newTag: v5.8.1
+  newTag: v5.8.1@sha256:34229f59e1609764196870aa2672aa1b784e88583ec445ff04e810a8333b72a7

deploy/kustomize/base/kustomization.yaml

@@ -15,4 +15,4 @@ patches:
         value: grafana-operator-permissions
 images:
   - name: ghcr.io/grafana/grafana-operator
-    newTag: v5.20.0
+    newTag: v5.20.0@sha256:050174c79c5bfce80fb96769e48026a905057202fb089b66457fa67f272d683e

deploy/kustomize/overlays/chainsaw-debug/kustomization.yaml

@@ -7,7 +7,7 @@ kind: Kustomization
 images:
   - name: ko.local/grafana/grafana-operator
     newName: hashicorp/http-echo
-    newTag: latest
+    newTag: latest@sha256:fcb75f691c8b0414d670ae570240cbf95502cc18a9ba57e982ecac589760a186
 
 patches:
   - path: deployment-patch.yaml

deploy/kustomize/overlays/cluster_scoped/kustomization.yaml

@@ -7,4 +7,4 @@ kind: Kustomization
 images:
 - name: ghcr.io/grafana/grafana-operator
   newName: ghcr.io/grafana/grafana-operator
-  newTag: v5.18.0
+  newTag: v5.18.0@sha256:0af2faec9d6f40e0d01077b3da859f7687144c3aeab05ec07a4556ab37081fbd

hugo/package-lock.json

@@ -1,7 +1,7 @@
 {
   "devDependencies": {
-    "autoprefixer": "^10.4.21",
-    "postcss": "^8.5.6",
-    "postcss-cli": "^10.1.0"
+    "autoprefixer": "10.4.21",
+    "postcss": "8.5.6",
+    "postcss-cli": "10.1.0"
   }
 }