Pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
JS-DevTools/npm-publish	action	pinDigest	-> 19c28f1
actions/checkout	action	pinDigest	-> 692973e
actions/download-artifact	action	pinDigest	-> fa0a91b
actions/github-script	action	pinDigest	-> 60a0d83
actions/setup-dotnet	action	pinDigest	-> 6bd8b7f
actions/setup-go	action	pinDigest	-> 0a12ed9
actions/setup-node	action	pinDigest	-> 60edb5d
actions/setup-node	action	pinDigest	-> 1e60f62
actions/setup-python	action	pinDigest	-> 39cd149
actions/upload-artifact	action	pinDigest	-> 834a144
anchore/sbom-action	action	pinDigest	-> e8d2a69
goreleaser/goreleaser-action	action	pinDigest	-> 5742e2a
jaxxstorm/action-install-gh-release	action	pinDigest	-> 25d5e2d
pulumi/action-install-pulumi-cli	action	pinDigest	-> b374ceb
pulumi/pulumi-upgrade-provider-action	action	pinDigest	-> f399a75
pypa/gh-action-pypi-publish	action	pinDigest	-> ec4db0b
sigstore/cosign-installer	action	pinDigest	-> 59acb62

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.