chore(deps): Pin lints bound and release-comment action SHA

.github/workflows/dependency-audit.yml

@@ -0,0 +1,43 @@
+name: Dependency Audit
+
+on:
+  push:
+    branches:
+      - main
+      - release/**
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  pub-dependencies:
+    name: Pub dependency report
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+      - uses: dart-lang/setup-dart@65eb853c7ba17dde3be364c3d2858773e7144260 # pin@v1.7.2
+      - name: Resolve dependencies
+        run: dart pub get
+      - name: Report dependency graph
+        run: dart pub deps
+      - name: Report outdated dependencies
+        run: dart pub outdated
+
+  dependency-review:
+    name: Dependency review
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+      - uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0
+        with:
+          fail-on-severity: moderate
+          fail-on-scopes: runtime, development
+
+  action-pinning:
+    name: Enforce Action SHA pins
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+      - uses: zgosalvez/github-actions-ensure-sha-pinned-actions@3db98c0363e2fa5df3e1c4c471777a7c10b24cc9 # v5.0.5

.github/workflows/release-comment-issues.yml

@@ -33,7 +33,7 @@ jobs:
           && !contains(steps.get_version.outputs.version, '-alpha.')
           && !contains(steps.get_version.outputs.version, '-rc.')
 
-        uses: getsentry/release-comment-issues-gh-action@v1
+        uses: getsentry/release-comment-issues-gh-action@52e08022ca721e701515ede89edd224b63b180eb # v1
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           version: ${{ steps.get_version.outputs.version }}

pubspec.yaml

@@ -21,7 +21,7 @@ dependencies:
   glob: ^2.1.3
 
 dev_dependencies:
-  lints: '>=3.0.0'
+  lints: ^6.1.0
   test: ^1.21.6
 
 platforms: