chore: Pin actions to a full SHA (#636)

* chore: Upgrade Node.js version

* Setup pinact

* Pin Actions

.github/FUNDING.yml

@@ -1,3 +1,3 @@
 # These are supported funding model platforms
 
-github: [robjtede]
+github: [robjtede, JohnTitor]

.github/dependabot.yml

@@ -9,6 +9,6 @@ updates:
     schedule:
       interval: monthly
     groups:
-       shuttle:
+        shuttle:
           patterns:
             - shuttle-*

.github/workflows/examples.yml

@@ -17,13 +17,13 @@ jobs:
       # required packages
       - run: sudo apt install sqlite3
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
 
       - name: Install Rust
-        uses: actions-rust-lang/setup-rust-toolchain@v1.13.0
+        uses: actions-rust-lang/setup-rust-toolchain@fb51252c7ba57d633bc668f941da052e410add48 # v1.13.0
 
       - name: Install just
-        uses: taiki-e/install-action@v2.57.4
+        uses: taiki-e/install-action@e8c1cf74a696e981aec979a6703471e61b400895 # v2.57.4
         with:
           tool: just
 

.github/workflows/website.yml

@@ -13,11 +13,11 @@ jobs:
     name: Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
 
-      - uses: actions/setup-node@v4.4.0
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
-          node-version: 18.x
+          node-version-file: .tool-versions
           cache: npm
 
       - name: Install dependencies