fix(security): autofix 3rd party Github Actions should be pinned (#13)

Co-authored-by: aikido-autofix[bot] <119856028+aikido-autofix[bot]@users.noreply.github.com>

Author: aikido-autofix[bot]

.github/workflows/release.yml

@@ -189,7 +189,7 @@ jobs:
         # OIDC trusted publishing (id-token: write) enables automatic provenance generation
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1
         with:
           body_path: release_notes.md
           draft: false