fix(ci): pin mlugg/setup-zig to commit hash

Author: fengmk2

.github/workflows/ci.yml

@@ -58,7 +58,7 @@ jobs:
 
       - run: rustup target add x86_64-unknown-linux-musl
       - run: pipx install cargo-zigbuild
-      - uses: mlugg/setup-zig@v2
+      - uses: mlugg/setup-zig@d1434d08867e3ee9daa34448df10607b98908d29 # v2
 
       # --locked: verify Cargo.lock is up to date (replaces the removed `cargo check --locked`)
       - run: cargo clippy --locked --all-targets --all-features -- -D warnings
@@ -108,7 +108,7 @@ jobs:
       - run: pipx install cargo-zigbuild
         if: ${{ matrix.target == 'x86_64-unknown-linux-gnu' }}
 
-      - uses: mlugg/setup-zig@v2
+      - uses: mlugg/setup-zig@d1434d08867e3ee9daa34448df10607b98908d29 # v2
         if: ${{ matrix.target == 'x86_64-unknown-linux-gnu' }}
 
       # For x86_64-apple-darwin on arm64 runner, install x64 node so fspy preload dylib