ci: updated all workflows to be pinned to commit hashes ahead of renovate connection (#1989)

* ci: updated all workflows to be pineed to commit hashes ahead of renovate connection

* ci: update doc links regex

* ci: bump version for codeql-action

* ci: bump version for action/cache to v4.2.0

* ci: adding package-manager-cache: false to the node v5 setup steps

* ci: remove the --include to test precedence as it was overriding

* chore: added missing @ from commit hash

* ci: updates to shas to bring up to latest, also update to renovate config to account for major versions

* chore: update renovate global minimum age settings

* updated node sha

* Apply suggestion from @M0NsTeRRR

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

* Apply suggestion from @M0NsTeRRR

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

* Apply suggestion from @M0NsTeRRR

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

* Apply suggestion from @M0NsTeRRR

* Apply suggestion from @M0NsTeRRR

---------

Co-authored-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>

.github/workflows/trivy-scan.yml

@@ -34,13 +34,13 @@ jobs:
 
         steps:
             - name: Checkout
-              uses: actions/checkout@v4
+              uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
               with:
                   fetch-depth: 0
                   persist-credentials: false
 
             - name: Cache Trivy DB
-              uses: actions/cache@v4
+              uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
               with:
                   path: .trivycache
                   key: trivy-${{ runner.os }}-${{ hashFiles('**/Dockerfile') }}
@@ -56,6 +56,6 @@ jobs:
                   ignore-unfixed: true
 
             - name: Upload SARIF to code scanning
-              uses: github/codeql-action/upload-sarif@v3
+              uses: github/codeql-action/upload-sarif@64d10c13136e1c5bce3e5fbde8d4906eeaafc885 # v3.30.6
               with:
                   sarif_file: trivy.sarif