VLN-1687: remediate unpinned-github-actions

[picatz]

🏕️ This pull request was created by camper, an automated security campaign tool.

Finding

Rule	unpinned-github-actions
Severity	MEDIUM
Repository	temporalio/reference-app-orders-web
Ticket	VLN-1687

Summary

🤠 Deputy pinned dependencies to immutable references.

• Total refs: 3
• Pinned refs: 3

Changed references:

• docker/setup-buildx-action: v3 -> 8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
• docker/login-action: v3 -> c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
• docker/build-push-action: v5.3.0 -> 2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5.3.0

Instructions

• Approve to merge this fix
• Request changes to trigger a new remediation attempt
• /camper rebase — rebase onto the base branch
• /camper close — close this PR without merging
• /camper retry — regenerate the fix from scratch against the current base

[picatz]

This PR has had no activity for 7 days and may need attention.

Actions you can take:

• Review and approve if the changes look good
• Close if this fix is no longer needed
• Comment /camper rebase to rebase onto the latest base branch
• Comment /camper retry to regenerate the fix

[picatz]

This PR has had no activity for 7 days and may need attention.

Actions you can take:

• Review and approve if the changes look good
• Close if this fix is no longer needed
• Comment /camper rebase to rebase onto the latest base branch
• Comment /camper retry to regenerate the fix

[picatz]

This PR has had no activity for 18 days and may need attention.

Actions you can take:

• Review and approve if the changes look good
• Close if this fix is no longer needed
• Comment /camper rebase to rebase onto the latest base branch
• Comment /camper retry to regenerate the fix

[picatz]

This PR has had no activity for 14 days and may need attention.

Actions you can take:

• Review and approve if the changes look good
• Close if this fix is no longer needed
• Comment /camper rebase to rebase onto the latest base branch
• Comment /camper retry to regenerate the fix

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.

✅ picatz
❌ Copilot
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[tomwheeler]

/camper rebase