pin actions commithash

[kazeburo]

No description provided.

[Copilot]

Pull Request Overview

This PR enhances security by pinning GitHub Actions to specific commit hashes instead of using semantic version tags. This prevents potential supply chain attacks where malicious code could be introduced through compromised action versions.

• Replaces semantic version references (e.g., @v4, @v5) with specific commit hashes
• Maintains version comments for readability and reference
• Applies changes consistently across both workflow files

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/workflows/test.yml	Pins actions/checkout, actions/setup-go, and goreleaser/goreleaser-action to specific commit hashes
.github/workflows/tagpr.yml	Pins actions/checkout, Songmu/tagpr, actions/setup-go, and goreleaser/goreleaser-action to specific commit hashes

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}