Pin dependencies (#1)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://code.forgejo.org/actions/checkout) | action | pinDigest |  -> `0ad4b8f` |
| git.snaile.de/snailed/xbps-builder | container | pinDigest |  -> `0ca263f` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yODAuMCIsInVwZGF0ZWRJblZlciI6IjM3LjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: snailed/trash-cli#1
Co-authored-by: Johnny5 <bot@snaile.de>
Co-committed-by: Johnny5 <bot@snaile.de>

.forgejo/workflows/build.yml

@@ -10,7 +10,7 @@ on:
 jobs:
   build-and-publish:
     runs-on: docker
-    container: git.snaile.de/snailed/xbps-builder:2024.0502.1733
+    container: git.snaile.de/snailed/xbps-builder:2024.0502.1733@sha256:0ca263f8a97fbd29f88349e731153f60569d19ddd7320f2c7c80047a35260c9b
     env:
       LICENSE: "ISC"
       SHORT_DESCRIPTION: "Extremely minimalistic trash client"
@@ -19,7 +19,7 @@ jobs:
       ARCH: "x86_64"
     steps:
       - name: Checkout
-        uses: https://code.forgejo.org/actions/checkout@v4
+        uses: https://code.forgejo.org/actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
 
       - name: Generate tag and package name
         run: |