ci: pin checkout, setup-node, setup-python +1 more to commit SHA

[ry-ops]

git-steer: Pin GitHub Actions to commit SHAs

Pins unpinned uses: references to their full commit SHA to prevent supply-chain attacks.

Changes

.github/workflows/achievement-tracker.yml

• actions/checkout@v3 → @f43a0e5...
• actions/setup-node@v3 → @3235b87...
  .github/workflows/security.yml
• actions/checkout@v4 → @34e1148...
• actions/setup-node@v4 → @49933ea...
• actions/setup-python@v5 → @a26af69...
• snyk/actions/node@master → @9cf6ca7...

Auto-generated by git-steer freshness detector

[coderabbitai]

Warning

Rate limit exceeded

@ry-ops has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 58 minutes and 1 second before requesting another review.

To keep reviews running without waiting, you can enable usage-based add-on for your organization. This allows additional reviews beyond the hourly cap. Account admins can enable it under billing.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 9f42d0c7-fcf8-4c4c-9f3e-2b902b9fdffd

📥 Commits

Reviewing files that changed from the base of the PR and between 825f130 and 82eecb1.

📒 Files selected for processing (2)

• .github/workflows/achievement-tracker.yml
• .github/workflows/security.yml

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch git-steer/pin-actions-1778009714053

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.