ci: disable persisted checkout credentials and specify stable toolchain

Author: VariableThe

.github/workflows/release.yml

@@ -36,9 +36,13 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        with:
+          persist-credentials: false
 
       - name: Install Rust
         uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+        with:
+          toolchain: stable
 
       - name: Install dependencies (Ubuntu only)
         if: matrix.os == 'ubuntu-latest'