chore(deps): pin dependencies

Author: renovate[bot]

.github/workflows/mago.yml

@@ -18,18 +18,18 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Cache Mago
-        uses: actions/cache@v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: .mago
           key: ${{ runner.os }}-mago-${{ hashFiles('mago.toml') }}
           restore-keys: |
             ${{ runner.os }}-mago-
 
       - name: Setup Mago
-        uses: nhedger/setup-mago@v1
+        uses: nhedger/setup-mago@b1b8f89862e133daf595f9ec95c7193c36ccfc14 # v1
         with:
           version: "latest"
           token: ${{ github.token }}

.github/workflows/php.yml

@@ -173,7 +173,7 @@ jobs:
         verbose: false
 
   packages:
-    uses: opentelemetry-php/gh-workflows/.github/workflows/validate-packages.yml@main
+    uses: opentelemetry-php/gh-workflows/.github/workflows/validate-packages.yml@21e75f4123f69dd6c0b3acda14b90044112a2538 # main
     needs: php
     with:
       matrix_extension: '["ast, json, grpc"]'