update php.yml with pinned dependency

Author: ildyria

.github/workflows/php.yml

@@ -19,7 +19,7 @@ jobs:
     if: (github.event_name == 'push' || github.event.pull_request.head.repo.full_name != github.repository)
     steps:
       - name: Cancel Previous Runs
-        uses: styfle/cancel-workflow-action@0.12.1
+        uses: styfle/cancel-workflow-action@85880fa0301c86cca9da44039ee3bb12d3bedbfa # 0.12.1
         with:
           access_token: ${{ github.token }}
 
@@ -35,7 +35,7 @@ jobs:
           php-version: "latest"
 
       - name: "Checkout code"
-        uses: "actions/checkout@v4.2.2"
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: "Install dependencies"
         uses: ramsey/composer-install@a2636af0004d1c0499ffca16ac0b4cc94df70565 # 3.1.0
@@ -55,7 +55,7 @@ jobs:
           php-version: "latest"
 
       - name: "Checkout code"
-        uses: "actions/checkout@v4.2.2"
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: "Install dependencies"
         uses: ramsey/composer-install@a2636af0004d1c0499ffca16ac0b4cc94df70565 # 3.1.0