ci: updated all workflows to be pinned to commit hashes ahead of renovate connection (#1989)

* ci: updated all workflows to be pineed to commit hashes ahead of renovate connection

* ci: update doc links regex

* ci: bump version for codeql-action

* ci: bump version for action/cache to v4.2.0

* ci: adding package-manager-cache: false to the node v5 setup steps

* ci: remove the --include to test precedence as it was overriding

* chore: added missing @ from commit hash

* ci: updates to shas to bring up to latest, also update to renovate config to account for major versions

* chore: update renovate global minimum age settings

* updated node sha

* Apply suggestion from @M0NsTeRRR

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

* Apply suggestion from @M0NsTeRRR

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

* Apply suggestion from @M0NsTeRRR

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

* Apply suggestion from @M0NsTeRRR

* Apply suggestion from @M0NsTeRRR

---------

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

.github/workflows/cypress.yml

@@ -37,23 +37,24 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
 
       - name: Set up Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
           node-version-file: package.json
+          package-manager-cache: false
 
       - name: Pnpm Setup
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
       - name: Setup cypress cache
-        uses: actions/cache@v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           path: ~/.cache/Cypress
           key: ${{ runner.os }}-cypress-store-${{ hashFiles('**/pnpm-lock.yaml') }}
@@ -66,7 +67,7 @@ jobs:
         run: pnpm exec cypress install
 
       - name: Cypress run
-        uses: cypress-io/github-action@v6
+        uses: cypress-io/github-action@b8ba51a856ba5f4c15cf39007636d4ab04f23e3c # v6.10.2
         with:
           install: false
           build: pnpm cypress:build