chore: unpin gha in renovate and update link checker workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

.github/renovate.json5

@@ -7,12 +7,11 @@
     ":dependencyDashboard",
     ":semanticCommits",
     ":automergeDigest",
-    ":automergeBranch",
-    "helpers:pinGitHubActionDigests"
+    ":automergeBranch"
   ],
   "dependencyDashboard": true,
   "dependencyDashboardTitle": "Renovate Dashboard 🤖",
-  "suppressNotifications": ["prIgnoreNotification"],
+  "suppressNotifications": ["prEditedNotification", "prIgnoreNotification"],
   "rebaseWhen": "conflicted",
   "schedule": ["on saturday"],
   "flux": {

.github/workflows/flux-diff.yaml

@@ -19,7 +19,7 @@ jobs:
         resource: ["helmrelease", "kustomization"]
     steps:
       - name: Diff Resources
-        uses: allenporter/flux-local/action/diff@8a71acacb98e7332b3151f7e33325915f03b8463 # 4.2.0
+        uses: allenporter/flux-local/action/diff@4.2.0
         id: diff
         with:
           sources: home-kubernetes
@@ -28,7 +28,7 @@ jobs:
 
       - if: ${{ steps.diff.outputs.diff != '' }}
         name: Add comment
-        uses: mshick/add-pr-comment@7c0890544fb33b0bdd2e59467fbacb62e028a096 # v2.8.1
+        uses: mshick/add-pr-comment@v2
         with:
           repo-token: "${{ secrets.GITHUB_TOKEN }}"
           message-id: "${{ github.event.pull_request.number }}/${{ matrix.path }}/${{ matrix.resource }}"

.github/workflows/link-check.yaml

@@ -1,39 +0,0 @@
----
-name: "Link Check"
-
-on:
-  workflow_dispatch:
-  schedule:
-    - cron: "0 0 * * 0"
-
-jobs:
-  link-check:
-    name: Link Check
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-
-      - name: Link Checker
-        uses: lycheeverse/lychee-action@ec3ed119d4f44ad2673a7232460dc7dff59d2421 # v1.8.0
-        id: lychee
-        env:
-          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
-
-      - name: Find Link Checker Issue
-        id: link-checker-issue
-        uses: micalevisk/last-issue-action@f5661581217cc78cc282d1351aa65bd8bd155003 # v2.2.1
-        with:
-          state: open
-          labels: |
-            broken-links
-
-      - name: Update Issue
-        uses: peter-evans/create-issue-from-file@433e51abf769039ee20ba1293a088ca19d573b7f # v4.0.1
-        with:
-          title: Broken links detected 🔗
-          issue-number: "${{ steps.link-checker-issue.outputs.issue-number }}"
-          content-filepath: ./lychee/out.md
-          token: "${{ secrets.GITHUB_TOKEN }}"
-          labels: |
-            broken-links

.github/workflows/lychee.yaml

@@ -0,0 +1,31 @@
+---
+name: "Lychee"
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "0 0 * * 0"
+
+env:
+  WORKFLOW_ISSUE_NUMBER: 1061
+
+jobs:
+  lychee:
+    name: Lychee
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Scan for broken links
+        uses: lycheeverse/lychee-action@v1
+        with:
+          args: --verbose --no-progress --exclude-mail './**/*.md'
+          output: /tmp/results.md
+
+      - name: Update Issue
+        uses: peter-evans/create-issue-from-file@v4
+        with:
+          title: Link Checker Dashboard 🔗
+          issue-number: "${{ env.WORKFLOW_ISSUE_NUMBER }}"
+          content-filepath: /tmp/results.md

.github/workflows/meta-labeler.yaml

@@ -15,7 +15,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Labeler
-        uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5.0.0
+        uses: actions/labeler@v5
         with:
           configuration-path: .github/labeler.yaml
           repo-token: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/meta-sync-labels.yaml

@@ -13,10 +13,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@v4
 
       - name: Sync Labels
-        uses: EndBug/label-sync@da00f2c11fdb78e4fae44adac2fdd713778ea3e8 # v2.3.2
+        uses: EndBug/label-sync@v2
         with:
           config-file: .github/labels.yaml
           token: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/release.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@v4
 
       - name: Create Release
         shell: bash