Pin dependencies

.gitea/workflows/release.yaml

@@ -15,7 +15,7 @@ jobs:
       REPO_OWNER: cluster
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
       - name: Fetch tags
         run: git fetch --tags origin
       - name: Get mlflow version
@@ -36,7 +36,7 @@ jobs:
             echo "tag_exists=false" >> $GITHUB_OUTPUT
           fi
       - name: Login to Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # v3
         if: steps.create.outputs.tag_exists == 'false'
         with:
           registry: git.namesny.com