pin actions

Author: phryneas

.github/workflows/release.yml

@@ -169,13 +169,13 @@ jobs:
     runs-on: ubuntu-latest
     permissions: {}
     steps:
-      - uses: actions/create-github-app-token@v1
+      - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 #v1
         id: github-actions-bot-app-token
         with:
           app-id: 819772
           private-key: ${{ secrets.APOLLO_GITHUB_ACTIONS_BOT_PRIVATE_KEY }}
           repositories: apollo-client-devtools
-      - uses: benc-uk/workflow-dispatch@v1
+      - uses: benc-uk/workflow-dispatch@7a027648b88c2413826b6ddd6c76114894dc5ec4 #v1
         with:
           workflow: update-errorcodes.yml
           repo: apollographql/apollo-client-devtools