chore(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	pinDigest	-> 8f4b7f8
actions/dependency-review-action	action	pinDigest	-> f46c48e
github/codeql-action	action	pinDigest	-> 04df126

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[coveralls]

Pull Request Test Coverage Report for Build 117

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 92.609%

---

Totals
Change from base Build 112:	0.0%
Covered Lines:	1917
Relevant Lines:	2070

---

💛 - Coveralls

[codecov]

Codecov Report

Merging #767 (82f101a) into master (b5e0200) will not change coverage.
The diff coverage is n/a.

❗ Current head 82f101a differs from pull request most recent head 02f6924. Consider uploading reports for the commit 02f6924 to get more accurate results

@@           Coverage Diff           @@
##           master     #767   +/-   ##
=======================================
  Coverage   88.88%   88.88%           
=======================================
  Files          16       16           
  Lines        2061     2061           
=======================================
  Hits         1832     1832           
  Misses        153      153           
  Partials       76       76           

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more