fix: pin 6 unpinned action(s)

Author: dagecko

.github/workflows/build.yml

@@ -20,15 +20,15 @@ jobs:
         if: >-
           github.event_name == 'pull_request' &&
           github.event.pull_request.head.repo.full_name != github.repository
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad # v5
         with:
           fail_ci_if_error: true
       - name: Upload coverage to codecov (with token)
         if: >
           github.repository == 'TheAlgorithms/Java' &&
           (github.event_name != 'pull_request' ||
           github.event.pull_request.head.repo.full_name == github.repository)
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad # v5
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           fail_ci_if_error: true

.github/workflows/clang-format-lint.yml

@@ -12,7 +12,7 @@ jobs:
 
     steps:
     - uses: actions/checkout@v6
-    - uses: DoozyX/clang-format-lint-action@v0.20
+    - uses: DoozyX/clang-format-lint-action@bcb4eb2cb0d707ee4f3e5cc3b456eb075f12cf73 # v0.20
       with:
         source: './src'
         extensions: 'java'

.github/workflows/infer.yml

@@ -24,7 +24,7 @@ jobs:
           distribution: 'temurin'
 
       - name: Set up OCaml
-        uses: ocaml/setup-ocaml@v3
+        uses: ocaml/setup-ocaml@44184b0d1ab751e3d1726b13e0afef61d6980755 # v3
         with:
           ocaml-compiler: 5
 

.github/workflows/update-directorymd.yml

@@ -19,7 +19,7 @@ jobs:
           persist-credentials: false
 
       - name: Run Directory Tree Generator
-        uses: DenizAltunkapan/directory-tree-generator@v2
+        uses: DenizAltunkapan/directory-tree-generator@b765a3588b0af4bcf38548975027b7c5d846363e # v2
         with:
           path: src
           extensions: .java
@@ -33,7 +33,7 @@ jobs:
           git diff --cached --quiet || git commit -m "Update DIRECTORY.md"
       
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v8
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8
         with:
           token: ${{ secrets.REPO_SCOPED_TOKEN }}
           branch: update-directory