chore: Revert "chore(deps): pin dependencies" (#107)

Author: DerekRoberts

.github/workflows/pr-open.yml

@@ -18,7 +18,7 @@ jobs:
     name: Build
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@v5
       - id: build
         uses: ./
         with:
@@ -43,7 +43,7 @@ jobs:
       packages: write
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@v5
       - id: no-attestation
         uses: ./
         with:
@@ -68,7 +68,7 @@ jobs:
     name: Advanced
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@v5
       - id: advanced
         uses: ./
         with:
@@ -86,7 +86,7 @@ jobs:
     name: Single Package
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@v5
       - id: single-package
         uses: ./
         with:

action.yml

@@ -105,7 +105,7 @@ runs:
     - name: GHCR Cleanup
       if: inputs.keep_versions
       continue-on-error: true # Stop fail if no versions to delete
-      uses: actions/delete-package-versions@e5bc658cc4c965c472efe991f8beea3981499c55 # v5.0.0
+      uses: actions/delete-package-versions@v5.0.0
       with:
         package-name: "${{ steps.vars.outputs.image_path }}"
         package-type: "container"
@@ -153,17 +153,17 @@ runs:
         tags: |
           ${{ inputs.tags }}
 
-    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+    - uses: actions/checkout@v5
       with:
         repository: ${{ inputs.repository }}
 
     - name: Set up Docker Buildx
       if: steps.build.outputs.triggered == 'true'
-      uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
+      uses: docker/setup-buildx-action@v3
 
     - name: Log in to the Container registry
       if: steps.build.outputs.triggered == 'true'
-      uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
+      uses: docker/login-action@v3
       with:
         registry: ghcr.io
         username: ${{ github.actor }}
@@ -172,7 +172,7 @@ runs:
     - name: Build and push ${{ inputs.package }} Docker image
       id: build_and_push
       if: steps.build.outputs.triggered == 'true'
-      uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
+      uses: docker/build-push-action@v6
       with:
         context: ${{ inputs.build_context || inputs.package }}
         file: ${{ inputs.build_file || format('{0}/Dockerfile', inputs.package) }}
@@ -210,7 +210,7 @@ runs:
         echo "sbom_spdx=sboms/${{ inputs.package }}-spdx.json" >> $GITHUB_OUTPUT
 
     - name: Upload SBOMs
-      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+      uses: actions/upload-artifact@v4
       if: steps.build.outputs.triggered == 'true' && inputs.sbom == 'true'
       with:
         name: sboms-${{ inputs.package }}
@@ -221,7 +221,7 @@ runs:
       continue-on-error: true
       id: attestation
       if: steps.build.outputs.triggered == 'true'
-      uses: actions/attest@daf44fb950173508f38bd2406030372c1d1162b1 # v3.0.0
+      uses: actions/attest@v3.0.0
       with:
         subject-name: ghcr.io/${{ github.event.repository.name }}/${{ inputs.package }}
         subject-digest: ${{ steps.build_and_push.outputs.digest }}
@@ -237,7 +237,7 @@ runs:
     # Action repo needs to be present for cleanup/tests
     - name: Checkout local repo to make sure action.yml is present
       if: github.repository != inputs.repository || failure()
-      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      uses: actions/checkout@v5
 
     - name: Print summary outputs
       if: always() # Always run this step to summarize the build