ci: updated all workflows to be pinned to commit hashes ahead of renovate connection (#1989)

* ci: updated all workflows to be pineed to commit hashes ahead of renovate connection

* ci: update doc links regex

* ci: bump version for codeql-action

* ci: bump version for action/cache to v4.2.0

* ci: adding package-manager-cache: false to the node v5 setup steps

* ci: remove the --include to test precedence as it was overriding

* chore: added missing @ from commit hash

* ci: updates to shas to bring up to latest, also update to renovate config to account for major versions

* chore: update renovate global minimum age settings

* updated node sha

* Apply suggestion from @M0NsTeRRR

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

* Apply suggestion from @M0NsTeRRR

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

* Apply suggestion from @M0NsTeRRR

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

* Apply suggestion from @M0NsTeRRR

* Apply suggestion from @M0NsTeRRR

---------

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

.github/renovate/groups.json5

@@ -7,7 +7,6 @@
       matchPackageNames: ['node'],
       matchManagers: ['dockerfile', 'npm'],
       groupName: 'Node.js',
-      minimumReleaseAge: '7 days',
       commitMessageTopic: 'Node.js',
     },
 
@@ -15,7 +14,6 @@
     {
       matchPackageNames: ['pg', 'sqlite3', 'typeorm'],
       groupName: 'Database',
-      minimumReleaseAge: '7 days',
     },
   ],
 }