Merge pull request #184 from micromatch/renovate/pin-dependencies

Pin actions/upload-code-coverage action to 1c15be3

Author: mrmlnc

.github/workflows/test.yml

@@ -53,7 +53,7 @@ jobs:
       - name: Upload coverage report
         # Only upload coverage report for Ubuntu and Node.js 25 (latest version), and only if the event is not a pull request or if the pull request is from the same repository.
         if: startsWith(matrix.os, 'ubuntu') && matrix.node == 25 && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
-        uses: actions/upload-code-coverage@v1
+        uses: actions/upload-code-coverage@1c15be36fc3733ba839b1dd643bd9556e4426dc1 # v1
         continue-on-error: true
         with:
           file: coverage/cobertura-coverage.xml