chore(deps): pin dependencies (#32)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | pinDigest | -> `f43a0e5` |
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | pinDigest | -> `50fbc62` |
| rust | final | pinDigest |  -> `5e33ae7` |

---

### Configuration

📅 **Schedule**: Branch creation - Between 08:00 AM and 10:59 AM ( * 8-10
* * * ) in timezone Europe/Paris, Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was created by Renovate.

<details>
<summary>Details</summary>

Check the [default
configuration](https://redirect.github.com/doctolib/renovate-config) and
[documentation](https://doctolib.atlassian.net/wiki/spaces/EE/pages/1882882081/Renovate+Dependencies+Management).

See the [logs on
Datadog](https://app.datadoghq.com/logs?query=source%3Agithub%20%40git.repository_url%3A%22https%3A%2F%2Fgithub.com%2Fdoctolib%2Frenovate-config.git%22%20%40ci.pipeline.name%3A%28Main%20OR%20%22Run%20Renovate%20on%20doctolib%2Fdoctolib%22%29%20%40name%3Arenovate%20%40repository%3A%2A%2A%2A%2Fcouchbase-lite-rust&agg_m=count&agg_m_source=base&agg_t=count&cols=%40repository&fromUser=false&messageDisplay=inline&refresh_mode=sliding&storage=hot&stream_sort=time%2Cdesc&viz=stream).
To replay this update, you can use the following `packageRules` on the
[Manual
Run](https://redirect.github.com/doctolib/renovate-config/actions/workflows/manual_run.yml)
page: `[{"matchPackageNames": ["*"], "enabled": false},
{"matchPackageNames": ["actions/checkout"], "enabled": true}]`

</details>

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhdXRvLWFwcHJvdmUiLCJkZXBlbmRlbmNpZXMiLCJnaXRodWItYWN0aW9ucyIsInBpbkRpZ2VzdCJdfQ==-->

Co-authored-by: doctolib-renovate[bot] <161009298+doctolib-renovate[bot]@users.noreply.github.com>

Author: doctolib-renovate[bot]

.github/workflows/build.yml

@@ -16,6 +16,6 @@ jobs:
     steps:
       - name: Install apt-get
         run: sudo apt-get install -y clang llvm
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - name: Build
         run: cargo build --features=${{ matrix.version }} --verbose

.github/workflows/clippy.yml

@@ -13,7 +13,7 @@ jobs:
       matrix:
         version: [community, enterprise]
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # v1
       - run: rustup component add clippy
       - uses: actions-rs/clippy-check@v1
         with:

.github/workflows/test.yml

@@ -21,7 +21,7 @@ jobs:
         with:
             toolchain: nightly
             components: rustfmt, clippy
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - name: Run tests
         run: cargo test --features=${{ matrix.version }} --verbose
       - name: Run tests with Couchbase Lite C leak check

Dockerfile

@@ -1,4 +1,4 @@
-FROM --platform=amd64 rust AS strip-stage
+FROM --platform=amd64 rust@sha256:5e33ae75f40bf25854fa86e33487f47075016d16726355a72171f67362ad6bf7 AS strip-stage
 ARG DIRNAME
 RUN apt-get update
 RUN apt-get -y install binutils binutils-aarch64-linux-gnu