action: pin GitHub actions via SHA

There were several issues with CI actions and moved tags on GitHub in
the past, therefore a lot of repositories activated the function to
enforce fulllength sha pins for actions.

This also applies recursively, and this action does not pin used
actions itself, making it not usable in a lot of other repos.

To improve adoption and make the action also more deterministic, we pin
the versions of used actions in this commit.

Signed-off-by: Stefan Kraus <[email protected]>

Author: Alicipy

action.yml

@@ -187,7 +187,7 @@ runs:
         echo "SETUP_OPT=${setup_opt}" >> $GITHUB_ENV
 
     - name: Cache Python packages
-      uses: actions/cache@v4
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
       with:
         path: ${{ env.PIP_CACHE_PATH }}
         key: pip-${{ runner.os }}-${{ hashFiles(format('{0}/zephyr/scripts/requirements*.txt', inputs.base-path)) }}
@@ -202,7 +202,7 @@ runs:
 
     - name: Cache Zephyr SDK
       id: cache-toolchain
-      uses: actions/cache@v4
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
       with:
         path: ${{ inputs.base-path }}/zephyr-sdk
         key: ${{ env.SDK_FILE }}-${{ github.event.repository.name }}-${{ inputs.toolchains }}
@@ -237,7 +237,7 @@ runs:
 
     - name: Cache ccache data
       if: inputs.enable-ccache == 'true' && runner.os != 'Windows'
-      uses: actions/cache@v4
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
       with:
         path: ${{ env.CCACHE_DIR }}
         key: ccache-${{ inputs.ccache-cache-key }}-${{ env.CCACHE_TIMESTAMP }}