chore: pin Github Actions

.github/workflows/release.yml

@@ -81,8 +81,8 @@ jobs:
             os: windows-2022
 
     steps: 
-    - uses: actions/checkout@v1
-    - uses: actions/[email protected]
+    - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 #4.1.0
+    - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c #v3.6.0
       with:
         node-version: 20.x
 
@@ -105,7 +105,7 @@ jobs:
 
     - name: macOS - Setup Python
       if: runner.os == 'macOS'
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 #v4.7.1
       with:
         python-version: '3.11'
         architecture: x64
@@ -124,7 +124,7 @@ jobs:
         yarn install --ignore-scripts
         node .prebuild/buildify-windows.js
 
-    - uses: actions/upload-artifact@v3
+    - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 #3.1.3
       with:
         name: prebuilds
         path: prebuilds
@@ -134,14 +134,14 @@ jobs:
     needs:
       - prebuild
     steps:
-      - uses: actions/checkout@v1
-      - uses: actions/[email protected]
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 #4.1.0
+      - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c #v3.6.0
         with:
           node-version: 20.x
           registry-url: "https://registry.npmjs.org" # required to use auth
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a #3.0.2
         with:
           name: prebuilds
           path: prebuilds