fix: autopin dependencies

Author: thypon

.github/workflows/checks.yml

@@ -47,7 +47,7 @@ jobs:
           key: cargo-${{ hashFiles('**/Cargo.lock') }}
 
       - name: Format
-        uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # v1
+        uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # v1.0.3
         with:
           command: fmt
           args: --check