Use hash for github action

Author: acronhub

.github/workflows/rspec.yml

@@ -8,8 +8,8 @@ jobs:
   rspec:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: ruby/setup-ruby@v1
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+      - uses: ruby/setup-ruby@13e7a03dc3ac6c3798f4570bfead2aed4d96abfb # v1.244.0
         with:
           ruby-version: '3.2.8'
           bundler-cache: true

CHANGELOG.md

@@ -1,6 +1,7 @@
 ## Unreleased
 
 - Require Ruby 3.2.8 or higher
+- Pin github actions
 
 ## v1.5.0