ci: pin GitHub Actions to SHA-pinned commit versions

[MoustaphaCamara]

Pin github actions to SHA-pinned commit versions

Summary by CodeRabbit

Release Notes

• Chores
  • Updated GitHub Actions workflow configurations to pin versions for improved reliability and consistency.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 2727f2b4-6f26-4a4e-9c53-7236f2b0b12d

📥 Commits

Reviewing files that changed from the base of the PR and between ec2b70f and 23c92c9.

📒 Files selected for processing (1)

• .github/workflows/codespell.yml

---

Walkthrough

The GitHub Actions workflow for codespell has been secured by pinning critical action dependencies to specific commit SHAs. The actions/checkout action and codespell-project/actions-codespell action now reference exact commits rather than floating version tags, ensuring reproducible and deterministic workflow execution.

Changes

Cohort / File(s)	Summary
Workflow Action Pinning .github/workflows/codespell.yml	Pinned actions/checkout from @v4 to a specific commit SHA and codespell-project/actions-codespell from @v2 to a specific commit SHA, improving supply chain security and reproducibility without altering step logic or inputs.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🖖 With steady hands upon the helm, we chart our course,
Each dependency locked firm, a captain's wise force,
No drift nor variance shall shake this vessel's way,
The Enterprise sails true—secure for every day!

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the primary change: pinning GitHub Actions to specific commit SHAs in the workflow file.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch mouss-260403-pinShaVersionsToGithubActions

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}