Fix issues caught by new actions linter

Author: kurtmckee

.github/workflows/build.yaml

@@ -6,8 +6,8 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-python@v2
+      - uses: "actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683" # v4.2.2
+      - uses: "actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b" # v5.3.0
       - name: install requirements
         run: pip install pre-commit
       - name: run linting

.github/workflows/pr_has_changelog.yaml

@@ -22,7 +22,7 @@ jobs:
     steps:
       # do a deep fetch to allow merge-base and diff
       # and ensure we are checking out the PR head
-      - uses: actions/checkout@v2
+      - uses: "actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683" # v4.2.2
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0