ci: update and pin GHA to a commit hash

[vaind]

used: Get-ChildItem . -Filter *.yml | Foreach-Object { pin-github-action --allow 'actions/*,getsentry/*' $_.FullName } & manually reverted the most disturbing formatting changes it's making (line breaks on long lines)...

There should be no need to do this again + new PRs will automatically get a failure through Danger.

#skip-changelog

Closes #593

[codecov-commenter]

Codecov Report

Base: 90.48% // Head: 90.48% // No change to project coverage 👍

Coverage data is based on head (eacb8df) compared to base (2deb645).
Patch has no changes to coverable lines.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1044   +/-   ##
=======================================
  Coverage   90.48%   90.48%           
=======================================
  Files         114      114           
  Lines        3573     3573           
=======================================
  Hits         3233     3233           
  Misses        340      340           

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report at Codecov.
📢 Do you have feedback about the report comment? Let us know in this issue.

[vaind]

Base: 90.48% // Head: 91.37% // Increases project coverage by +0.88% 🎉

I guess this is due to update from v2 to v3

[marandaneto]

Thanks @vaind