chore(deps): pin dependencies (#33)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/release.yaml

@@ -90,7 +90,7 @@ jobs:
           echo "BIN_PATH=${BIN_PATH}" >> $GITHUB_ENV
 
       - name: Upload artifact to release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2
         with:
           tag_name: ${{ github.ref_name }}
           files: |

.github/workflows/test.yaml

@@ -43,7 +43,7 @@ jobs:
           go-version: '1.25'
 
       - name: Install kubectl
-        uses: azure/setup-kubectl@v4
+        uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
         with:
           version: 'v1.29.0' # any modern kubectl compatible with k3d's default