[ci] Pins github action commit hash (#10599)

as title. This is required due to our policy

context: flutter/flutter#179033

## Pre-Review Checklist

**Note**: The Flutter team is currently trialing the use of [Gemini Code Assist for GitHub](https://developers.google.com/gemini-code-assist/docs/review-github-code). Comments from the `gemini-code-assist` bot should not be taken as authoritative feedback from the Flutter team. If you find its comments useful you can update your code accordingly, but if you are unsure or disagree with the feedback, please feel free to wait for a Flutter team member's review for guidance on which automated comments should be addressed.

[^1]: Regular contributors who have demonstrated familiarity with the repository guidelines only need to comment if the PR is not auto-exempted by repo tooling.

Author: chunhtai

.github/workflows/batch_release_pr.yml

@@ -34,7 +34,7 @@ jobs:
 
       - name: Create batch release PR
         if: steps.check-branch-exists.outputs.exists == 'true'
-        uses: peter-evans/create-pull-request@v8
+        uses: peter-evans/create-pull-request@4320041ed380b20e97d388d56a7fb4f9b8c20e79
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           commit-message: "[${{ github.event.client_payload.package }}] Batch release"

.github/workflows/go_router_batch.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Repository Dispatch
-        uses: peter-evans/repository-dispatch@v4
+        uses: peter-evans/repository-dispatch@5fc4efd1a4797ddb68ffd0714a238564e4cc0e6f
         with:
           token: "${{ secrets.GITHUB_TOKEN }}"
           event-type: batch_release_pr

script/tool/lib/src/common/file_filters.dart

@@ -22,9 +22,10 @@ bool isRepoLevelNonCodeImpactingFile(String path) {
         '.github/dependabot.yml',
         '.github/labeler.yml',
         '.github/post_merge_labeler.yml',
-        '.github/workflows/release.yml',
-        '.github/workflows/pull_request_label.yml',
       ].contains(path) ||
+      // This directory contains github action workflow files, and the package
+      // repository does not use github actions for tests.
+      path.startsWith('.github/workflows/') ||
       // This directory only affects automated code reviews, so cannot affect
       // any package tests.
       path.startsWith('.gemini/');

script/tool/test/common/file_filters_test.dart

@@ -0,0 +1,71 @@
+// Copyright 2013 The Flutter Authors
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+import 'package:flutter_plugin_tools/src/common/file_filters.dart';
+import 'package:test/test.dart';
+
+void main() {
+  group('isRepoLevelNonCodeImpactingFile', () {
+    test('returns true for known non-code files', () {
+      expect(isRepoLevelNonCodeImpactingFile('AUTHORS'), isTrue);
+      expect(isRepoLevelNonCodeImpactingFile('CODEOWNERS'), isTrue);
+      expect(isRepoLevelNonCodeImpactingFile('CONTRIBUTING.md'), isTrue);
+      expect(isRepoLevelNonCodeImpactingFile('LICENSE'), isTrue);
+      expect(isRepoLevelNonCodeImpactingFile('README.md'), isTrue);
+      expect(isRepoLevelNonCodeImpactingFile('AGENTS.md'), isTrue);
+      expect(
+        isRepoLevelNonCodeImpactingFile('.github/PULL_REQUEST_TEMPLATE.md'),
+        isTrue,
+      );
+      expect(isRepoLevelNonCodeImpactingFile('.github/dependabot.yml'), isTrue);
+      expect(isRepoLevelNonCodeImpactingFile('.github/labeler.yml'), isTrue);
+      expect(
+        isRepoLevelNonCodeImpactingFile('.github/post_merge_labeler.yml'),
+        isTrue,
+      );
+      expect(
+        isRepoLevelNonCodeImpactingFile('.github/workflows/release.yml'),
+        isTrue,
+      );
+      expect(
+        isRepoLevelNonCodeImpactingFile(
+          '.github/workflows/pull_request_label.yml',
+        ),
+        isTrue,
+      );
+      expect(
+        isRepoLevelNonCodeImpactingFile(
+          '.github/workflows/batch_release_pr.yml',
+        ),
+        isTrue,
+      );
+      expect(
+        isRepoLevelNonCodeImpactingFile(
+          '.github/workflows/go_router_batch.yml',
+        ),
+        isTrue,
+      );
+      expect(
+        isRepoLevelNonCodeImpactingFile('.github/workflows/ci.yml'),
+        isTrue,
+      );
+      expect(
+        isRepoLevelNonCodeImpactingFile(
+          '.github/workflows/any_new_workflow.yml',
+        ),
+        isTrue,
+      );
+    });
+
+    test('returns true for .gemini/ files', () {
+      expect(isRepoLevelNonCodeImpactingFile('.gemini/foo'), isTrue);
+      expect(isRepoLevelNonCodeImpactingFile('.gemini/bar/baz'), isTrue);
+    });
+
+    test('returns false for other files', () {
+      expect(isRepoLevelNonCodeImpactingFile('pubspec.yaml'), isFalse);
+      expect(isRepoLevelNonCodeImpactingFile('lib/main.dart'), isFalse);
+    });
+  });
+}