chore(deps): update dependencies

.github/workflows/cd.yml

@@ -785,7 +785,7 @@
 
   ci:
     name: CI
-    uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@main
+    uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
     needs:
       - setup
     with:
@@ -1005,7 +1005,7 @@
 
       - name: Check and create stub
         id: check-and-create-stub
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/publish/check-and-create-stub@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/publish/check-and-create-stub@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         if: ${{ matrix.environment != 'prod' && matrix.environment != 'prod-canary' }}
         with:
           plugin-id: ${{ fromJSON(needs.ci.outputs.plugin).id }}
@@ -1015,13 +1015,13 @@
 
       - name: Check artifact ZIP(s)
         id: check-artifact-zips
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/publish/check-artifacts@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/publish/check-artifacts@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           zips: ${{ needs.upload-to-gcs-release.outputs.gcs-zip-urls }}
           plugin-id: ${{ fromJSON(needs.ci.outputs.plugin).id }}
 
       - name: Publish to catalog
-        uses: grafana/plugin-ci-workflows/actions/plugins/publish/publish@main
+        uses: grafana/plugin-ci-workflows/actions/plugins/publish/publish@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           zips: ${{ needs.upload-to-gcs-release.outputs.gcs-zip-urls }}
           environment: ${{ matrix.environment == 'prod-canary' && 'prod' || matrix.environment }}
@@ -1338,7 +1338,7 @@
           permission_set: website-docs
 
       - name: Publish docs
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/docs/publish@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/docs/publish@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           id: ${{ fromJSON(needs.ci.outputs.plugin).id }}
           version: ${{ fromJSON(needs.ci.outputs.plugin).version }}
@@ -1387,7 +1387,7 @@
 
       - name: Parse changelog
         id: changelog
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/changelog@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/changelog@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           changelog-path: ${{ inputs.plugin-directory }}/CHANGELOG.md
 

.github/workflows/ci.yml

@@ -385,7 +385,7 @@
 jobs:
   check-for-release-channel:
     name: Check for release channel
-    uses: grafana/plugin-ci-workflows/.github/workflows/check-release-channel.yml@main
+    uses: grafana/plugin-ci-workflows/.github/workflows/check-release-channel.yml@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
     with:
       DO-NOT-USE-allow-pinned-commit-hashes: ${{ inputs.DO-NOT-USE-allow-pinned-commit-hashes }}
 
@@ -492,7 +492,7 @@
 
       - name: Setup
         id: setup
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/setup@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/setup@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           plugin-directory: ${{ inputs.plugin-directory }}
           node-version: ${{ fromJson(steps.tooling-versions.outputs.result).nodeVersion }}
@@ -563,7 +563,7 @@
 
       - name: Test and build frontend
         id: frontend
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/frontend@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/frontend@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           plugin-directory: ${{ inputs.plugin-directory }}
           secrets: ${{ (fromJson(steps.workflow-context.outputs.result).isTrusted && inputs.frontend-secrets != '') && inputs.frontend-secrets || '' }}
@@ -572,7 +572,7 @@
       - name: Test and build backend
         id: backend
         if: ${{ steps.check-for-backend.outputs.has-backend == 'true' }}
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/backend@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/backend@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           github-token: ${{ steps.generate-github-token.outputs.token || '' }}
           plugin-directory: ${{ inputs.plugin-directory }}
@@ -581,7 +581,7 @@
 
       - name: Package universal ZIP
         id: universal-zip
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/package@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/package@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           universal: "true"
           dist-folder: ${{ inputs.plugin-directory }}/dist
@@ -592,7 +592,7 @@
 
       - name: Package os/arch ZIPs
         id: os-arch-zips
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/package@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/package@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           universal: "false"
           dist-folder: ${{ inputs.plugin-directory }}/dist
@@ -603,7 +603,7 @@
 
       - name: Trufflehog secrets scanning
         if: ${{ inputs.run-trufflehog == true }}
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/trufflehog@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/trufflehog@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           trufflehog-version: ${{ inputs.trufflehog-version || env.DEFAULT_TRUFFLEHOG_VERSION }}
           folder: ${{ inputs.plugin-directory }}/dist-artifacts
@@ -750,11 +750,11 @@
         shell: bash
 
       - name: Test docs
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/docs/test@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/docs/test@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
 
   playwright:
     name: Playwright E2E tests
-    uses: grafana/plugin-ci-workflows/.github/workflows/playwright.yml@main
+    uses: grafana/plugin-ci-workflows/.github/workflows/playwright.yml@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
     if: ${{ inputs.run-playwright == true }}
     needs:
       - test-and-build
@@ -782,7 +782,7 @@
 
   playwright-docker:
     name: Plugins - Dockerized Playwright E2E tests
-    uses: grafana/plugin-ci-workflows/.github/workflows/playwright-docker.yml@main
+    uses: grafana/plugin-ci-workflows/.github/workflows/playwright-docker.yml@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
     if: ${{ inputs.run-playwright-docker == true }}
     needs:
       - test-and-build

.github/workflows/playwright-docker.yml

@@ -193,6 +193,6 @@ jobs:
     if: always()
     steps:
       - name: Check matrix job status
-        uses: grafana/plugin-ci-workflows/actions/internal/check-matrix-status@main
+        uses: grafana/plugin-ci-workflows/actions/internal/check-matrix-status@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           results: ${{ needs.playwright-tests.result }}

.github/workflows/playwright.yml

@@ -158,7 +158,7 @@ jobs:
 
       - name: Setup
         id: setup
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/setup@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/setup@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           plugin-directory: ${{ inputs.plugin-directory }}
           node-version: ${{ inputs.node-version }}
@@ -369,6 +369,6 @@ jobs:
     if: always()
     steps:
       - name: Check matrix job status
-        uses: grafana/plugin-ci-workflows/actions/internal/check-matrix-status@main
+        uses: grafana/plugin-ci-workflows/actions/internal/check-matrix-status@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           results: ${{ needs.playwright-tests.result }}

.github/workflows/pr-checks-workflow-references.yml

@@ -26,7 +26,7 @@ jobs:
 
       - name: Switch references
         id: switch-references
-        uses: grafana/plugin-ci-workflows/actions/internal/switch-references@main
+        uses: grafana/plugin-ci-workflows/actions/internal/switch-references@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           repository: grafana/plugin-ci-workflows
           ref: main

.github/workflows/release-please-pr-update-tagged-references.yml

@@ -109,7 +109,7 @@ jobs:
       # This is to ensure that the tag is completely hermetic.
       - name: Switch references (actions and workflows)
         id: switch-references
-        uses: grafana/plugin-ci-workflows/actions/internal/switch-references@main
+        uses: grafana/plugin-ci-workflows/actions/internal/switch-references@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           repository: grafana/plugin-ci-workflows
           ref: ${{ steps.component-name.outputs.component }}/v${{ steps.get-version.outputs.version }}
@@ -125,7 +125,7 @@ jobs:
       # This way we update only the examples relevant to the new component being released.
       - name: Switch references (examples)
         id: switch-references-examples
-        uses: grafana/plugin-ci-workflows/actions/internal/switch-references@main
+        uses: grafana/plugin-ci-workflows/actions/internal/switch-references@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           repository: grafana/plugin-ci-workflows
           # Prefix to update only the relevant examples
@@ -137,7 +137,7 @@ jobs:
       - name: Get bot user info
         id: get-bot-user
         if: steps.switch-references.outputs.changed == 'true' || steps.switch-references-examples.outputs.changed == 'true'
-        uses: grafana/plugin-ci-workflows/actions/internal/get-bot-user@main
+        uses: grafana/plugin-ci-workflows/actions/internal/get-bot-user@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           app-slug: grafana-plugins-platform-bot
           token: ${{ steps.generate-github-token.outputs.token }}

.github/workflows/release-please-restore-rolling-release.yml

@@ -52,7 +52,7 @@ jobs:
       # (we want to encourage using tagged releases in docs)
       - name: Switch references
         id: switch-references
-        uses: grafana/plugin-ci-workflows/actions/internal/switch-references@main
+        uses: grafana/plugin-ci-workflows/actions/internal/switch-references@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           repository: grafana/plugin-ci-workflows
           ref: main
@@ -67,7 +67,7 @@ jobs:
       - name: Get bot user info
         id: get-bot-user
         if: steps.switch-references.outputs.changed == 'true'
-        uses: grafana/plugin-ci-workflows/actions/internal/get-bot-user@main
+        uses: grafana/plugin-ci-workflows/actions/internal/get-bot-user@d2b067d7de846d90d7455629f80ddf86d9db6849 # main
         with:
           app-slug: grafana-plugins-platform-bot
           token: ${{ steps.generate-github-token.outputs.token }}