pin github actions to SHAs

Author: kyli

.github/workflows/release.yml

@@ -29,7 +29,7 @@ jobs:
         run: npm install
 
       - name: Create Release Pull Request or Publish
-        uses: changesets/action@v1 # Must use latest version!
+        uses: changesets/action@6a0a831ff30acef54f2c6aa1cbbc1096b066edaf # v1
         with:
           publish: npx changeset publish
         env:

.github/workflows/snapit.yml

@@ -13,7 +13,7 @@ jobs:
     steps:
       - name: Checkout default branch
         uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4
         with:
           version: 10
       - name: Create snapshot version