chore(ci): Pin actions to full commit sha (#24538)

[StepSecurity] ci: Harden GitHub Actions

Signed-off-by: StepSecurity Bot <[email protected]>

Author: step-security-bot

.github/workflows/unit_windows.yml

@@ -22,7 +22,7 @@ jobs:
         with:
           ref: ${{ inputs.ref }}
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: "3.10"
       - run: .\scripts\environment\bootstrap-windows-2025.ps1

.github/workflows/vdev_publish.yml

@@ -56,7 +56,7 @@ jobs:
           echo "ASSET=${OUTDIR}.tgz" >> "$GITHUB_ENV"
 
       - name: Upload asset to release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
         with:
           files: ${{ env.ASSET }}
         env: