chore(deps): pin dependencies

Author: renovate[bot]

.github/workflows/build.yml

@@ -236,7 +236,7 @@ jobs:
 
       - name: Generate release
         id: release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1
         with:
           files: wheels/*
           body_path: ${{ runner.temp }}/changelog
@@ -252,7 +252,7 @@ jobs:
           packages-dir: wheels
 
       - name: Create PR for changelog update
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@a4f52f8033a6168103c2538976c07b467e8163bc # v6
         with:
           token: ${{ secrets.GH_TOKEN }}
           commit-message: "chore: update changelog ${{ github.ref_name }}"