chore(deps): pin dependencies

[vovinacci]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	pinDigest	→ 9c091bb
actions/setup-node	action	pinDigest	→ 48b55a0
actions/setup-python	action	pinDigest	→ ece7cb0
aquasecurity/trivy-action	action	pinDigest	→ ed142fd
gitleaks/gitleaks-action	action	pinDigest	→ e0c47f4
googleapis/release-please-action	action	pinDigest	→ 5c625bf
j178/prek-action	action	pinDigest	→ 0bb87d7
postgres	service	pinDigest	→ 57c72fd
renovatebot/github-action	action	patch	v46.1.18 → v46.1.19

---

Release Notes

renovatebot/github-action (renovatebot/github-action)

v46.1.19

Compare Source

Documentation

• update references to renovatebot/github-action to v46.1.18 (950df21)

Miscellaneous Chores

• deps: update dependency @​semantic-release/github to v12.0.9 (f02906e)
• deps: update dependency prettier to v3.9.2 (dde0b8c)
• deps: update dependency prettier to v3.9.3 (1790d84)
• deps: update dependency prettier to v3.9.4 (cf18a80)
• deps: update dependency typescript-eslint to v8.62.1 (e2a831c)

Build System

• deps: lock file maintenance (40439db)

Continuous Integration

• deps: update ghcr.io/renovatebot/renovate docker tag to v43.252.3 (f3ee604)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.252.4 (fb6587d)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.252.5 (08ffb41)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.252.6 (8de96ca)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.253.0 (5628119)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.253.1 (9572f12)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.253.2 (d044ae3)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.254.0 (891e07c)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.255.0 (cec36e0)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.255.2 (ac6f89c)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.256.0 (d8ab09a)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.256.1 (63b2a4d)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.256.2 (7f2db1d)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.256.3 (d63a0f4)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.257.2 (368980a)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.257.4 (337f317)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.257.5 (9330ec3)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.257.6 (3c05155)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.257.7 (5787ba3)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.257.9 (6df70f7)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.258.0 (2866786)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.258.1 (91eee10)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.259.0 (f770175)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.259.2 (462028a)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.259.3 (69cde7f)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.260.0 (30ec257)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.260.2 (203f0f2)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.