bump: pin dependencies (#163)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://togithub.com/actions/checkout) | action |
pinDigest | -> `2541b12` |
|
[release-drafter/release-drafter](https://togithub.com/release-drafter/release-drafter)
| action | pinDigest | -> `df69d58` |
|
[vweevers/additional-tags-action](https://togithub.com/vweevers/additional-tags-action)
| action | pinDigest | -> `f54689c` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, click
this checkbox.

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://app.renovatebot.com/dashboard#github/fuxingloh/multi-labeler).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzMi4yMDEuMyIsInVwZGF0ZWRJblZlciI6IjMyLjIwMS4zIn0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.github/workflows/ci-use.yml

@@ -17,5 +17,5 @@ jobs:
     name: Uses
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
       - uses: ./

.github/workflows/ci.yml

@@ -11,7 +11,7 @@ jobs:
     name: Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
 
       - run: npm install
       - run: npm run ci

.github/workflows/draft.yml

@@ -8,6 +8,6 @@ jobs:
   draft-release:
     runs-on: ubuntu-latest
     steps:
-      - uses: release-drafter/release-drafter@v5
+      - uses: release-drafter/release-drafter@df69d584deac33d8569990cb6413f82447181076 # tag=v5
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release.yml

@@ -8,5 +8,5 @@ jobs:
   release-tags:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: vweevers/additional-tags-action@v1
+      - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
+      - uses: vweevers/additional-tags-action@f54689cf358d5368ed738306a414a3b020957296 # tag=v1