ci(github): fix "Unpinned tag for a non-immutable Action in workflow"

Author: remarkablemark

.github/workflows/release-please.yml

@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Release Please
-        uses: googleapis/release-please-action@v5
+        uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
         id: release
         with:
           release-type: node

.github/workflows/test.yml

@@ -27,7 +27,7 @@ jobs:
         run: npm run test:ci
 
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@v6
+        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
         with:
           token: ${{ secrets.CODECOV_TOKEN }}