chore: pin dependencies (#344)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/release-please.yml

@@ -14,7 +14,7 @@ jobs:
             id-token: write
             models: read
         steps:
-            - uses: googleapis/release-please-action@v4
+            - uses: googleapis/release-please-action@16a9c90856f42705d54a6fda1823352bdc62cf38 # v4
               id: release
 
             - uses: actions/checkout@v6

.github/workflows/update-baseline.yml

@@ -24,7 +24,7 @@ jobs:
               run: npm run build:baseline
 
             - name: Create Pull Request
-              uses: peter-evans/create-pull-request@v7
+              uses: peter-evans/create-pull-request@22a9089034f40e5a961c8808d113e2c98fb63676 # v7
               with:
                   token: ${{ secrets.WORKFLOW_PUSH_BOT_TOKEN }}
                   commit-message: "fix: update baseline data"