chore: pin dep + workflow by hash

.github/workflows/lint-workflows.yml

@@ -26,6 +26,6 @@ jobs:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       # From https://github.com/rhysd/actionlint/blob/main/docs/usage.md#use-actionlint-on-github-actions
       - name: Check workflow files
-        uses: docker://rhysd/actionlint:1.7.1
+        uses: docker://rhysd/actionlint:1.7.1@sha256:c6a00dfcb3c7ffb2f22363ded22ce3d789ea4c6a1862b11a2f7716c56c2509af
         with:
           args: -color

packages/ui-templates/package.json

@@ -22,7 +22,7 @@
     "@unocss/reset": "0.62.3",
     "critters": "0.0.24",
     "html-validate": "8.22.0",
-    "htmlnano": "^2.1.1",
+    "htmlnano": "2.1.1",
     "jiti": "1.21.6",
     "knitwork": "1.1.0",
     "lodash-es": "4.17.21",

pnpm-lock.yaml

@@ -626,7 +626,7 @@ importers:
         specifier: 8.22.0
         version: 8.22.0(vitest@1.6.0(@types/node@20.16.5)(happy-dom@15.7.3)(sass@1.78.0)(terser@5.32.0))
       htmlnano:
-        specifier: ^2.1.1
+        specifier: 2.1.1
         version: 2.1.1(cssnano@7.0.6(postcss@8.4.45))(postcss@8.4.45)(svgo@3.3.2)(terser@5.32.0)(typescript@5.6.2)
       jiti:
         specifier: 1.21.6