chore: Pin GitHub actions to a hash (update) (#82)

Pin GitHub actions versions to a hash. See this for more details:
https://github.com/coopnorge/helloworld/security/code-scanning/21

This PR was automatically generated by a codemod implemented in the
following PRs:
- coopnorge/codemod#128
- coopnorge/codemod#230

If pinning already existed, it now pins without the `pin@` prefix in
comments because
that is not supported by renovate.

Author: pravindahal

.github/workflows/oci-ci.yaml

@@ -58,9 +58,9 @@ jobs:
     steps:
       - uses: actions/checkout@v6
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # pin@v3
+        uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # pin@v3
+        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
       - name: Cache xdg
         if: ${{ inputs.xdg_cache_hash != '' }}
         uses: actions/cache@v5
@@ -71,7 +71,7 @@ jobs:
             xdg-${{ github.repository }}-${{ github.job }}-${{ inputs.xdg_cache_hash }}
             xdg-${{ github.repository }}-${{ github.job }}-
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # pin@v3
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -86,7 +86,7 @@ jobs:
         run: docker compose run --rm ${{ inputs.docker-compose-service }} build VERBOSE=all ENVIRONMENT=${{ inputs.environment }} OCI_TAG_SUFFIX_USER="${{ inputs.tags }}"
       - name: Autenticate with GCP
         if: ${{ inputs.publish }}
-        uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # pin@v3.0.0
+        uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3.0.0
         with:
           workload_identity_provider: ${{ inputs.workload_identity_provider }}
           service_account: ${{ inputs.service_account }}