ci: Pin actions to commit hash

Author: RandomByte

.github/workflows/release-please.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-24.04
     environment: release
     steps:
-    - uses: googleapis/release-please-action@v5
+    - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
       id: release
       with:
         token: ${{secrets.GH_OPENUI5BOT}}

.github/workflows/reuse-compliance.yml

@@ -18,4 +18,4 @@ jobs:
     steps:
     - uses: actions/checkout@v6
     - name: Execute REUSE Compliance Check
-      uses: fsfe/reuse-action@v6
+      uses: fsfe/reuse-action@676e2d560c9a403aa252096d99fcab3e1132b0f5 # v6.0.0