Pin dependencies (#96)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [UCL-MIRSG/.github](https://togithub.com/UCL-MIRSG/.github) | action |
pinDigest | -> `9a2274e` |
| [UCL-MIRSG/.github](https://togithub.com/UCL-MIRSG/.github) | action |
pinDigest | -> `561536e` |
| [UCL-MIRSG/.github](https://togithub.com/UCL-MIRSG/.github) | action |
pinDigest | -> `37270c9` |
| [actions/checkout](https://togithub.com/actions/checkout) | action |
pinDigest | -> `0ad4b8f` |
| nginx |  | pinDigest |  -> `ed6d2c4` |
| prom/blackbox-exporter |  | pinDigest |  -> `b04a9fe` |

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on the first day of the
month" (UTC), Automerge - "every weekday" (UTC).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/UCL-MIRSG/ansible-collection-infra).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMjEuMiIsInVwZGF0ZWRJblZlciI6IjM3LjMzMS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.github/workflows/add-issue-to-project.yml

@@ -11,7 +11,7 @@ jobs:
   add-issue-to-project:
     runs-on: ubuntu-latest
     steps:
-      - uses: UCL-MIRSG/.github/actions/[email protected]
+      - uses: UCL-MIRSG/.github/actions/add-to-project@37270c9d4ceb7872329515476c78654cdb5b6a83 # v0.38.0
         with:
           app-id: ${{ secrets.APP_ID }}
           app-pem: ${{ secrets.APP_PEM }}

.github/workflows/linting.yml

@@ -13,7 +13,7 @@ jobs:
   linting:
     runs-on: ubuntu-latest
     steps:
-      - uses: UCL-MIRSG/.github/actions/linting@v0
+      - uses: UCL-MIRSG/.github/actions/linting@561536e2ee67e89d148c1c9830c9debcf3a7ff07 # v0
         with:
           ansible-roles-config: ./meta/requirements.yml
           pre-commit-config: ./.pre-commit-config.yaml

.github/workflows/molecule-install-omero.yml

@@ -20,7 +20,7 @@ jobs:
       ANSIBLE_FORCE_COLOR: 1
     steps:
       - name: Check out the codebase
-        uses: actions/checkout@v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         with:
           path: ansible_collections/mirsg/infrastructure
 

.github/workflows/molecule-install-xnat.yml

@@ -28,7 +28,7 @@ jobs:
       ANSIBLE_FORCE_COLOR: 1
     steps:
       - name: Check out the codebase
-        uses: actions/checkout@v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         with:
           path: ansible_collections/mirsg/infrastructure
 

.github/workflows/molecule-monitoring.yml

@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: Check out the codebase
-        uses: actions/checkout@v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         with:
           path: ansible_collections/mirsg/infrastructure
 

.github/workflows/molecule-postgresql_upgrade.yml

@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: Check out the codebase
-        uses: actions/checkout@v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         with:
           path: ansible_collections/mirsg/infrastructure
 

.github/workflows/molecule.yml

@@ -31,7 +31,7 @@ jobs:
 
     steps:
       - name: Run `molecule test`
-        uses: UCL-MIRSG/.github/actions/[email protected]
+        uses: UCL-MIRSG/.github/actions/molecule-test@9a2274e191076c6e2062c04881c67e8df73bfb81 # v0.40.0
         with:
           scenario: ${{ matrix.scenario }}
           # yamllint disable-line rule:line-length

roles/monitoring_server/tasks/install_blackbox_exporter_container.yml

@@ -19,7 +19,7 @@
   community.docker.docker_container:
     name: blackbox-exporter
     hostname: blackbox-exporter
-    image: prom/blackbox-exporter
+    image: prom/blackbox-exporter@sha256:b04a9fef4fa086a02fc7fcd8dcdbc4b7b35cc30cdee860fdc6a19dd8b208d63e
     state: started
     user: "{{ monitoring_server_uid }}:{{ monitoring_server_gid }}"
     command: --config.file=/config/blackbox-exporter.yml

roles/monitoring_server/tasks/install_nginx_container.yml

@@ -66,7 +66,7 @@
   community.docker.docker_container:
     name: nginx
     hostname: nginx
-    image: nginx
+    image: nginx@sha256:ed6d2c43c8fbcd3eaa44c9dab6d94cb346234476230dc1681227aa72d07181ee
     state: started
     networks:
       - name: monitor-net