chore: pin actions to commit SHA

[diogomatsubara]

Description

pin actions to commit SHA

What does this PR do?

pin actions to commit SHA

Why is this change needed?

https://docs.github.com/en/actions/reference/security/secure-use#using-third-party-actions

Related Issues

N/A

---

🏷️ Label-Based Checklist

Based on the labels applied to this PR, please complete these additional requirements:

Labels: dependencies, internal

📦 Dependency Updates

Since this PR updates dependencies:

• Changelog reviewed - Breaking changes in dependency identified and addressed
• Security advisories checked - No known vulnerabilities in new version
• License compatible - New version license is compatible with project
• Tests pass - All tests pass with new dependency versions
• Transitive deps reviewed - New transitive dependencies checked
• Version pinned appropriately - Semver range is intentional and correct
• Update scope limited - Updating one major dependency at a time when possible

Best practice: Keep dependency updates focused and test thoroughly.

🏠 Internal Change

This PR is marked as internal (not user-facing):

• No API changes - Public APIs unchanged
• No behavior changes - External behavior identical
• Refactoring/maintenance - Code improvements only
• Tests still pass - All existing tests pass without modification

Lighter review: Internal changes may have lighter review requirements.

Instructions:

1. Check off items as you complete them (change - [ ] to - [x])
2. The PR checklist CI will verify these are completed

This checklist updates automatically when labels change, but preserves your checked boxes.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.74%. Comparing base (d3757e6) to head (2ad8d37).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2777      +/-   ##
==========================================
- Coverage   74.76%   74.74%   -0.03%     
==========================================
  Files         419      419              
  Lines       63955    63955              
==========================================
- Hits        47819    47802      -17     
- Misses      16136    16153      +17     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.