Pin down action to full-length commit

Signed-off-by: Keshav Priyadarshi <git@keshav.space>

Author: keshav-space

.github/workflows/update-releases.yml

@@ -60,7 +60,7 @@ jobs:
 
       # 1 Checkout the target repo (Repo B)
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           ref: main
           fetch-depth: 0