chore(deps): pin dependencies (#6)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/pre-commit.yaml

@@ -11,11 +11,11 @@ jobs:
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - uses: astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 # v7.1.2
-      - uses: reMarkable/actions/setup-hadolint@1a3b7eb48965b4daead59f8f732ed77cc9a76685 # v5.29.3
+      - uses: reMarkable/actions/setup-hadolint@659fa80a7c79d3a2e731ea2b20ebecdddbcaafba # v5.30.2
       - uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2
         with:
           # renovate: datasource=github-releases depName=hashicorp/terraform
-          terraform_version: v1.13.3
+          terraform_version: v1.13.4
           terraform_wrapper: false
       - uses: terraform-linters/setup-tflint@4cb9feea73331a35b422df102992a03a44a3bb33 # v6.2.1
         with:

.github/workflows/release.yml

@@ -21,11 +21,11 @@ jobs:
             goarch: arm64
     steps:
       - name: Set up Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           go-version: ${{ matrix.go-version }}
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - name: Set version
         id: version
         run: |
@@ -37,7 +37,7 @@ jobs:
         run: |
           tar -czf hook.tgz hook hook.sh
       - name: Upload Release Asset
-        uses: actions/upload-release-asset@v1
+        uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:

.github/workflows/test.yml

@@ -7,10 +7,10 @@ jobs:
     name: Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - name: Setup Go 1.21.x
         uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           # Semantic version range syntax or exact version of Go
-          go-version: '1.21.x'
+          go-version: '1.25.x'
       - run: go test -v ./...