chore(deps): pin dependencies

Author: renovate[bot]

.github/workflows/nodejs.yml

@@ -13,7 +13,7 @@ jobs:
           - '22'
     steps:
       - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4
         with:
           version: 9
       - uses: actions/setup-node@v4

.github/workflows/publish.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4
         with:
           version: 9
       - uses: actions/setup-node@v4
@@ -38,7 +38,7 @@ jobs:
         run: echo "version=$(cat package.json | jq -r .version)" >> $GITHUB_OUTPUT
       # まだ tag がないバージョンなら tag を push する
       - name: publish tag
-        uses: pkgdeps/git-tag-action@v3
+        uses: pkgdeps/git-tag-action@ef111413f44ebe5cc05994e7f5b5b9edaaada08d # v3
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           github_repo: ${{ github.repository }}