chore(pinact): pin/update GitHub Actions (#942)

Co-authored-by: davidliu <242400+davidliu@users.noreply.github.com>

Author: davidliu

.github/workflows/android.yml

@@ -39,7 +39,7 @@ jobs:
         java-version: '17'
         distribution: 'adopt'
 
-    - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+    - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
       with:
         path: |
           ~/.gradle/caches
@@ -187,7 +187,7 @@ jobs:
     # Setting up diffuse artifacts
     - name: Setup cache for base source file for diffuse
       if: github.event_name == 'push'
-      uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
       with:
         path: client-sdk-android/diffuse-source-file
         key: diffuse-${{ github.sha }}
@@ -214,7 +214,7 @@ jobs:
     outputs:
       base_aar_cache_hit: ${{ steps.diffuse_base_lookup.outputs.cache-hit }}
     steps:
-      - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+      - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         id: diffuse_base_lookup
         with:
           path: client-sdk-android/diffuse-source-file
@@ -252,7 +252,7 @@ jobs:
           distribution: 'adopt'
 
       # Diffuse checking for pull requests
-      - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+      - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         name: Download base source AAR for diffuse
         with:
           path: client-sdk-android/diffuse-source-file

.github/workflows/changesets.yml

@@ -21,7 +21,7 @@ jobs:
       - name: Checkout Repo
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: pnpm/action-setup@08c4be7e2e672a47d11bd04269e27e5f3e8529cb # v6.0.0
+      - uses: pnpm/action-setup@078e9d416474b29c0c387560859308974f7e9c53 # v6.0.1
         with:
           version: 10