ci: pin sborka actions to v0.5.0.130

.github/workflows/build-katcher-native.yaml

@@ -23,7 +23,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v7
 
-      - uses: youndie/sborka/.github/actions/setup-kotlin@main
+      - uses: youndie/sborka/.github/actions/setup-kotlin@v0.5.0.130
         with:
           konan-cache: "true"
 

.github/workflows/ci.yml

@@ -44,7 +44,7 @@ jobs:
       # RQ5 measured the cache that remains rather than assuming it: `T_first_compile` median 70 s
       # over eight runs against a 90 s threshold, and a 100% hit rate over those eight. The
       # architecture was already green; this removes the part that was paid for twice.
-      - uses: youndie/sborka/.github/actions/setup-kotlin@main
+      - uses: youndie/sborka/.github/actions/setup-kotlin@v0.5.0.130
         with:
           konan-cache: "true"
 

.github/workflows/publish-android.yaml

@@ -9,7 +9,7 @@ jobs:
     steps:
       - name: Checkout sources
         uses: actions/checkout@v7
-      - uses: youndie/sborka/.github/actions/setup-kotlin@main
+      - uses: youndie/sborka/.github/actions/setup-kotlin@v0.5.0.130
         with:
           konan-cache: "true"
       # :dev:client-android is not published here any more. The `client-android` coordinate now

.github/workflows/publish-client.yaml

@@ -18,7 +18,7 @@ jobs:
     steps:
       - name: Checkout sources
         uses: actions/checkout@v7
-      - uses: youndie/sborka/.github/actions/setup-kotlin@main
+      - uses: youndie/sborka/.github/actions/setup-kotlin@v0.5.0.130
         with:
           konan-cache: "true"
       - name: Publish