Pin dependencies (#9)

* Pin dependencies

* Act on CI results: as per YAMLLint's output

117 is the max. at this moment, so whatever goes beyond
it will have us rethink our strategy

* Act on CI results: handle it when Renovate can't

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Paulo F. Oliveira <[email protected]>

.github/workflows/build.yml

@@ -18,18 +18,18 @@ jobs:
     runs-on: ${{matrix.os}}
 
     steps:
-      - uses: actions/[email protected]
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
 
       - name: parse-tool-versions
-        uses: paulo-ferraz-oliveira/[email protected]
+        uses: paulo-ferraz-oliveira/parse-tool-versions@534819f70c0c04d788b49dafc29c8117901277bd # v1.0.3
         id: tool-versions
 
       - name: nodejs
-        uses: actions/[email protected]
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
         with:
           node-version: ${{steps.tool-versions.outputs.nodejs}}
 
       - name: plugin-test
-        uses: asdf-vm/actions/[email protected]
+        uses: asdf-vm/actions/plugin-test@05e0d2ed97b598bfce82fd30daf324ae0c4570e6 # v3.0.2
         with:
           command: markdownlint-cli2 _version

.github/workflows/lint.yml

@@ -8,10 +8,10 @@ jobs:
     runs-on: ubuntu-22.04
 
     steps:
-      - uses: actions/[email protected]
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
 
       - name: install
-        uses: asdf-vm/actions/[email protected]
+        uses: asdf-vm/actions/install@05e0d2ed97b598bfce82fd30daf324ae0c4570e6 # v3.0.2
 
       - name: lint.bash
         run: scripts/lint.bash
@@ -20,30 +20,30 @@ jobs:
     runs-on: ubuntu-22.04
 
     steps:
-      - uses: actions/[email protected]
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
 
       - name: Check workflow files
-        uses: docker://rhysd/actionlint:1.6.23
+        uses: docker://rhysd/actionlint:1.7.1@sha256:435ecdb63b1169e80ca3e136290072548c07fc4d76a044cf5541021712f8f344
         with:
           args: -color
 
   build:
     runs-on: ubuntu-22.04
 
     steps:
-      - uses: actions/[email protected]
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
 
       # uses .markdownlint.yml for configuration
       - name: markdownlint
-        uses: DavidAnson/[email protected]
+        uses: DavidAnson/markdownlint-cli2-action@b4c9feab76d8025d1e83c653fa3990936df0e6c8 # v16.0.0
         with:
           globs: |
             .github/**/*.md
             *.md
             LICENSE
 
       - name: yamllint
-        uses: ibiqlik/[email protected]
+        uses: ibiqlik/action-yamllint@2576378a8e339169678f9939646ee3ee325e845c # v3.1.1
         with:
           file_or_dir: |
             .github/workflows/*.yml

.tool-versions

@@ -1,3 +1,3 @@
-nodejs 20.3.1
-shellcheck 0.9.0
-shfmt 3.7.0
+nodejs 20.14.0
+shellcheck 0.10.0
+shfmt 3.8.0

.yamllint.yml

@@ -2,4 +2,6 @@
 extends: default
 rules:
   line-length:
-    max: 100
+    max: 117
+  comments:
+    min-spaces-from-content: 1