github: Bump versions

```
ghat swot -d .
```

.github/workflows/update-themes.yml

@@ -4,7 +4,7 @@ on:
     - cron: "0 0 * * *"
   workflow_dispatch:
 env:
-  HUGO_VERSION: "v0.140.2"
+  HUGO_VERSION: "v0.146.1"
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -16,10 +16,10 @@ jobs:
       HUGO_CACHEDIR: /tmp/hugo_cache
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
         with:
-          go-version: "^1.22.0"
+          go-version: "^1.24.0"
       - name: Update submodules
         working-directory: ./cmd/hugothemesitebuilder
         run: |