Update actions and pin to specific commit SHAs

Author: hidakatsuya

.github/workflows/test.yml

@@ -24,14 +24,14 @@ jobs:
             ruby-version: '3.4'
 
     steps:
-    - uses: hidakatsuya/action-setup-redmine@v1
+    - uses: hidakatsuya/action-setup-redmine@0147e23d3e5516edf2a0d2cca095570283ca81b4 # v2.0.0
       with:
         repository: ${{ matrix.redmine-repository }}
         version: ${{ matrix.redmine-version }}
         ruby-version: ${{ matrix.ruby-version }}
         database: 'postgres:14'
 
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       with:
         path: plugins/redmine_message_customize