chore(deps): pin actions

Author: nedatidrc

.github/workflows/merge-release.yml

@@ -29,7 +29,7 @@ jobs:
     name: Merge tag
 
     steps:
-      - uses: actions/create-github-app-token@v3.2.0
+      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         id: app-token
         with:
           app-id: ${{ vars.GHA_APP_ID }}
@@ -40,7 +40,7 @@ jobs:
           echo 'BRANCH='${{ inputs.branch || 'main' }} >> $GITHUB_ENV
 
       - name: Checkout "${{ env.BRANCH }}" branch locally
-        uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ env.BRANCH }}
           fetch-tags: true