chore: Pin dependencies (#1012)

Co-authored-by: seqeralabs-renovate[bot] <269134929+seqeralabs-renovate[bot]@users.noreply.github.com>
Co-authored-by: Cristian Ramon-Cortes <cristianrcv@users.noreply.github.com>

Author: seqeralabs-renovate[bot]

.github/actions/deploy/action.yml

@@ -32,7 +32,7 @@ runs:
         aws-region: ${{ inputs.aws-region }}
 
     - name: Deploy to prod
-      uses: kodermax/kubectl-aws-eks@master
+      uses: kodermax/kubectl-aws-eks@ebad7507329396261acc8b118807b81727314058 # master
       env:
         KUBE_CONFIG_DATA: ${{ inputs.kube-config-data }}
       with:

.github/workflows/claude.yml

@@ -30,7 +30,7 @@ jobs:
           fetch-depth: 1
 
       - name: Run Claude PR Action
-        uses: anthropics/claude-code-action@beta
+        uses: anthropics/claude-code-action@28f83620103c48a57093dcc2837eec89e036bb9f # beta
         with:
           anthropic_api_key: ${{ secrets.ENG_ANTHROPIC_API_KEY }}
           # Or use OAuth token instead:

.github/workflows/security-submit-dependecy-graph.yml

@@ -17,7 +17,7 @@ jobs:
         java-version: 17
 
     - name: Generate and submit dependency graph for wave
-      uses: gradle/actions/dependency-submission@v4
+      uses: gradle/actions/dependency-submission@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
       with:
         dependency-resolution-task: "dependencies"
         additional-arguments: "--configuration runtimeClasspath"