ci: pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	pin	v6 → v6.0.2
actions/setup-go	action	pin	v6 → v6.4.0
arduino/setup-task	action	pin	v2 → v2.0.0
autofix-ci/action	action	pin	v1 → v1.3.3
docker/build-push-action	action	pin	v7 → v7.1.0
docker/login-action	action	pin	v4 → v4.1.0
docker/metadata-action	action	pin	v6 → v6.0.0
docker/setup-buildx-action	action	pin	v4 → v4.0.0
golangci/golangci-lint-action	action	pin	v9 → v9.2.0
sigoden/install-binary	action	pin	v1 → v1.2.0
sqlc-dev/setup-sqlc	action	pin	v5 → v5.0.0

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • Every minute (* * * * *)
• Automerge
  • On day 4, 5, 6, 7, and 8 of the month (* * 4,5,6,7,8 * *)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-04-16 15:40 UTC · Rule: renovate
• ✅ Checks skipped · PR is already up-to-date
• ✅ Merged — 2026-04-16 15:40 UTC · at 0f0427247b25ceafd16384408bd761e2aae516fd

This pull request spent 17 seconds in the queue, including 2 seconds running CI.

Required conditions to merge