ci: set commit SHA to actions/checkout and actions/setup-node

Author: Gumball12

.github/workflows/ci.yml

@@ -13,9 +13,9 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - run: corepack enable
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: "22"
           cache: "pnpm"

.github/workflows/sync.yml

@@ -15,20 +15,19 @@ jobs:
   yuki-no:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - run: corepack enable
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: "22"
           cache: "pnpm"
 
       # https://github.com/Gumball12/yuki-no/
-      - uses: Gumball12/yuki-no@wip
+      - uses: Gumball12/yuki-no@fbefaa195fd73259626c84ff5a81a1e057360d3b # v1
         with:
           access-token: ${{ secrets.GITHUB_TOKEN }}
           head-repo: https://github.com/vitejs/vite.git
           track-from: a46f11a6c218f74b08ffb3e33a25c2ce02ba6643
           include: |
             docs/**
-          plugins: |
-            @yuki-no/plugin-release-tracking@latest
+          release-tracking: true