chore(deps): update github actions (#54)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.github/workflows/ci.yaml

@@ -9,7 +9,7 @@ permissions:
 
 jobs:
   ci:
-    uses: Sea-Haven-Industries/.github/.github/workflows/ci-static.yaml@e5691d8a7f96ac4d5a841a82975ff0a4354d53ac # v1.0.7
+    uses: Sea-Haven-Industries/.github/.github/workflows/ci-static.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
     with:
       build-command: "npx @11ty/eleventy"
       check-dir: "_site"

.github/workflows/dependency-review.yml

@@ -7,7 +7,7 @@ permissions:
 
 jobs:
   review:
-    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@e5691d8a7f96ac4d5a841a82975ff0a4354d53ac # v1.0.7
+    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
     with:
       # brace-expansion OOM DoS: no in-range fix (patch only in 5.0.8; @11ty/recursive-copy
       # pins minimatch <10.0.3). Build-time-only exposure, adjudicated in

.github/workflows/deploy.yaml

@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
 
       - name: Set up Node
         uses: actions/setup-node@v7
@@ -46,7 +46,7 @@ jobs:
           echo "Build OK: $count files."
 
       - name: Configure AWS credentials using OIDC
-        uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6
+        uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3
         with:
           role-to-assume: arn:aws:iam::011934824531:role/tf-managed/githubdeploy-seahaven-site
           aws-region: us-east-1

.github/workflows/labeler.yml

@@ -10,4 +10,4 @@ permissions:
 
 jobs:
   label:
-    uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@e5691d8a7f96ac4d5a841a82975ff0a4354d53ac # v1.0.7
+    uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10