chore(deps): pin dependencies (#1)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/ci.yml

@@ -111,7 +111,7 @@ jobs:
 
       -   name: "Upload coverage artifact"
           if: matrix.with_coverage == true
-          uses: actions/upload-artifact@v6.0.0
+          uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
           with:
             name: code-coverage-results
             path: tests/_output/

.github/workflows/release.yml

@@ -30,7 +30,7 @@ jobs:
 
       - name: Semantic Release
         id: semantic
-        uses: cycjimmy/semantic-release-action@v6.0.0
+        uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90 # v6.0.0
         with:
           tag_format: ${version}
           branches: |