Merge pull request #4904 from hbrunn/18.0-pin-external-actions

[18.0][IMP] pin random github actions to their SHA commit

Author: pedrobaeza

.github/workflows/documentation-commit.yml

@@ -60,7 +60,7 @@ jobs:
           # try to build the documentation
           sh ./build_openupgrade_docs
       - name: Commit changes
-        uses: EndBug/add-and-commit@v9
+        uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 #v9
         with:
           add: "docs"
           default_author: github_actions

.github/workflows/test.yml

@@ -25,21 +25,22 @@ jobs:
       PGPASSWORD: "odoo"
       PGUSER: "odoo"
       OPENUPGRADE_USE_DEMO: "yes"
+    services:
+      postgres:
+        image: postgres:14.0
+        env:
+          POSTGRES_USER: odoo
+          POSTGRES_PASSWORD: odoo
+          POSTGRES_DB: odoo
+        ports:
+          - 5432:5432
     steps:
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
           python-version: '3.10'
-      - name: Configure Postgres
-        uses: harmon758/postgresql-action@v1
-        with:
-          postgresql version: "14"
-          postgresql user: ${DB_USERNAME}
-          postgresql password: ${DB_PASSWORD}
-      - name: Wait / Sleep
-        uses: jakejarvis/[email protected]
-        with:
-          time: "10s"
+      - name: Sleep for 10 seconds
+        run: sleep 10s
       - name: DB Creation
         run: createdb $DB
       - name: DB Restore