chore: pin some dependencies by hash

* Update `github-action-renovate-config-validator` action to specific commit hash
* Specify Miniconda version and add checksum verification in `onedal-dev.Dockerfile`

.github/workflows/renovate-validation.yml

@@ -25,6 +25,6 @@ jobs:
       - name: Checkout
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Validate
-        uses: suzuki-shunsuke/github-action-renovate-config-validator@v1.0.1
+        uses: suzuki-shunsuke/github-action-renovate-config-validator@b54483862375f51910a60c4f498e927d4f3df466 # v1.0.1
         with:
           config_file_path: .github/renovate.json

dev/docker/onedal-dev.Dockerfile

@@ -17,6 +17,7 @@
 FROM ubuntu:22.04@sha256:590f59cd1a88bebe6293510a76b28a92a28782f483a1ec1f69ccbc716735b796
 
 ARG workdirectory="/sources/oneDAL"
+ARG miniconda_version="py312_24.5.0-0"
 
 COPY . ${workdirectory}
 
@@ -28,7 +29,9 @@ RUN apt-get update && \
 
 # Install miniconda
 ENV CONDA_DIR /opt/conda
-RUN wget --quiet https://repo.anaconda.com/miniconda/Miniconda3-latest-Linux-x86_64.sh -O ~/miniconda.sh && \
+
+RUN wget --quiet https://repo.anaconda.com/miniconda/Miniconda3-${miniconda_version}-Linux-x86_64.sh -O ~/miniconda.sh && \
+    echo "4b3b3b1b99215e85fd73fb2c2d7ebf318ac942a457072de62d885056556eb83e" ~/miniconda.sh | sha256sum -c - && \
     /bin/bash ~/miniconda.sh -b -p /opt/conda
 
 # Put conda in path to use conda activate