ci: Pin more actions to commit hash

Author: RandomByte

.github/workflows/coverage.yml

@@ -55,6 +55,6 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Close parallel build
-        uses: coverallsapp/github-action@v2.3.7
+        uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b # v2.3.6
         with:
           parallel-finished: true

.github/workflows/release-please.yml

@@ -23,7 +23,7 @@ jobs:
          node-version: 24.x
 
       - name: Run Release Please to update PRs and create releases
-        uses: googleapis/release-please-action@v5
+        uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
         id: release
         with:
           token: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/reuse-compliance.yml

@@ -46,4 +46,4 @@ jobs:
     - uses: actions/checkout@v6
 
     - name: REUSE check for full repository
-      uses: fsfe/reuse-action@v6
+      uses: fsfe/reuse-action@676e2d560c9a403aa252096d99fcab3e1132b0f5 # v6.0.0