ci: updated all workflows to be pinned to commit hashes ahead of renovate connection (#1989)

* ci: updated all workflows to be pineed to commit hashes ahead of renovate connection

* ci: update doc links regex

* ci: bump version for codeql-action

* ci: bump version for action/cache to v4.2.0

* ci: adding package-manager-cache: false to the node v5 setup steps

* ci: remove the --include to test precedence as it was overriding

* chore: added missing @ from commit hash

* ci: updates to shas to bring up to latest, also update to renovate config to account for major versions

* chore: update renovate global minimum age settings

* updated node sha

* Apply suggestion from @M0NsTeRRR

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

* Apply suggestion from @M0NsTeRRR

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

* Apply suggestion from @M0NsTeRRR

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

* Apply suggestion from @M0NsTeRRR

* Apply suggestion from @M0NsTeRRR

---------

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

.github/workflows/docs-deploy.yml

@@ -22,18 +22,19 @@ jobs:
     name: Build Docusaurus
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           fetch-depth: 0
           persist-credentials: false
 
       - name: Set up Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
           node-version-file: package.json
+          package-manager-cache: false
 
       - name: Pnpm Setup
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
 
       - name: Get pnpm store directory
         shell: sh
@@ -41,7 +42,7 @@ jobs:
           echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
 
       - name: Setup pnpm cache
-        uses: actions/cache@v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           path: ${{ env.STORE_PATH }}
           key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
@@ -58,7 +59,7 @@ jobs:
         run: pnpm build
 
       - name: Upload Build Artifact
-        uses: actions/upload-pages-artifact@v4
+        uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b6 # v4.0.0
         with:
           path: gen-docs/build
 
@@ -76,4 +77,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5