chore(deps): pin dependencies

Author: anaconda-renovate[bot]

.github/workflows/tests.yaml

@@ -12,15 +12,15 @@ jobs:
     name: Python ${{ matrix.python-version }}
     steps:
 
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
 
     - name: Setup timezone
       uses: zcong1993/setup-timezone@master
       with:
         timezone: UTC
 
     - name: Set up Python
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@e9aba2c848f5ebd159c070c61ea2c4e2b122355e # v2
       with:
         python-version: ${{ matrix.python-version }}