Pin dependencies (#1)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://code.forgejo.org/actions/checkout) | action | pinDigest |  -> `b4ffde6` |
| git.snaile.de/snailed/xbps-builder | container | pinDigest |  -> `89d1763` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yNzkuMCIsInVwZGF0ZWRJblZlciI6IjM3LjI3OS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #1
Co-authored-by: Johnny5 <bot@snaile.de>
Co-committed-by: Johnny5 <bot@snaile.de>

.forgejo/workflows/build.yml

@@ -6,7 +6,7 @@ on: [push]
 jobs:
   build-and-publish:
     runs-on: docker
-    container: git.snaile.de/snailed/xbps-builder:2024.4.2029
+    container: git.snaile.de/snailed/xbps-builder:2024.4.2029@sha256:89d1763608330cb72aa3253c5f0416daf779ff26dda1ac1d1de0b424a7d43162
     env:
       LICENSE: "GPL-3.0"
       SHORT_DESCRIPTION: "Tokyonight GTK Theme"
@@ -15,7 +15,7 @@ jobs:
       ARCH: "x86_64"
     steps:
       - name: Checkout
-        uses: https://code.forgejo.org/actions/checkout@v4
+        uses: https://code.forgejo.org/actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           submodules: true