fix: pinned action commit hashes, updated pr template

Author: ryanseq-gyg

.github/pull_request_template.md

@@ -3,15 +3,31 @@
   Describe the change at a high-level.
 -->
 
+## Commit Message Format
+<!--
+  This project uses Conventional Commits for automated versioning and changelog generation.
+  Ensure your commit messages follow this format:
+
+  - feat: A new feature (triggers MINOR version bump)
+  - fix: A bug fix (triggers PATCH version bump)
+  - feat!: A breaking change (triggers MAJOR version bump)
+  - docs: Documentation changes
+  - chore: Maintenance tasks
+  - test: Adding or updating tests
+
+  Examples:
+  - feat: add expectation for null value validation
+  - fix: correct type hint in expect_value_greater_than
+  - feat!: remove deprecated validation methods
+-->
+
 ## Checklist
 <!--
   Please consider the following when submitting code changes.
 
-  Note: You can check the boxes once you submit, or put an x in the [ ]
-
-  like [x]
+  Note: You can check the boxes once you submit, or put an x in the [ ] like [x]
 -->
 
 -   [ ] Tests have been added in the prescribed format
--   [ ] `CHANGELOG.md` has been updated to reflect changes
--   [ ] Version has been updated in `pyproject.toml`
+-   [ ] Commit messages follow [Conventional Commits](https://www.conventionalcommits.org/) format
+-   [ ] Pre-commit hooks pass locally

.github/workflows/publish.yaml

@@ -24,4 +24,4 @@ jobs:
         run: uv build
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # release/v1

.github/workflows/release-please.yaml

@@ -13,4 +13,4 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - uses: googleapis/release-please-action@v4
+      - uses: googleapis/release-please-action@c3fc4de07084f75a2b61a5b933069bda6edf3d5c # v4