chore: Update GitHub Actions to use commit SHAs

Update actions/checkout and actions/setup-python to use commit SHAs
instead of version tags, following LF standard practice.

- actions/checkout: v3 -> v6.0.0 (1af3b93)
- actions/setup-python: v4 -> v6.0.0 (e797f83)

Fixes actionlint errors about outdated action runners.

Change-Id: I0855292099f8b0d909b2fca73c123ddd88aa2ab6
Signed-off-by: Anil Belur <abelur@linuxfoundation.org>

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 25aaddf..3b61b12 100644 (file)
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -10,9 +10,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
       - name: Configure Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
         with:
           python-version: "3.8"
       - name: Build package distribution files