ci: updated all workflows to be pinned to commit hashes ahead of renovate connection (#1989)

* ci: updated all workflows to be pineed to commit hashes ahead of renovate connection

* ci: update doc links regex

* ci: bump version for codeql-action

* ci: bump version for action/cache to v4.2.0

* ci: adding package-manager-cache: false to the node v5 setup steps

* ci: remove the --include to test precedence as it was overriding

* chore: added missing @ from commit hash

* ci: updates to shas to bring up to latest, also update to renovate config to account for major versions

* chore: update renovate global minimum age settings

* updated node sha

* Apply suggestion from @M0NsTeRRR

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

* Apply suggestion from @M0NsTeRRR

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

* Apply suggestion from @M0NsTeRRR

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

* Apply suggestion from @M0NsTeRRR

* Apply suggestion from @M0NsTeRRR

---------

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

.github/renovate.json5

@@ -4,13 +4,12 @@
     "config:recommended",
     ":dependencyDashboard",
     ":timezone(UTC)",
-    "docker:enableMajor",
-    "docker:pinDigests",
     "group:nextjsMonorepo",
     "group:reactMonorepo",
     "group:typescript-eslintMonorepo",
     "group:tailwindcssMonorepo",
     "github>seerr-team/seerr//.github/renovate/actions.json5",
+    "github>seerr-team/seerr//.github/renovate/docker.json5",
     "github>seerr-team/seerr//.github/renovate/groups.json5",
     "github>seerr-team/seerr//.github/renovate/helm.json5",
     "github>seerr-team/seerr//.github/renovate/labels.json5",
@@ -20,5 +19,6 @@
   "dependencyDashboardTitle": "Renovate Dashboard 🤖",
   "suppressNotifications": ["prEditedNotification", "prIgnoreNotification"],
   "rebaseWhen": "conflicted",
-  "labels": ["dependencies"]
+  "labels": ["dependencies"],
+  "minimumReleaseAge": "7 days"
 }