ci: Use Checkout releases instead of shas (#869)

Co-authored-by: Dylan Anthony <dbanty@users.noreply.github.com>

Author: dbanty

.github/workflows/checks.yml

@@ -15,7 +15,7 @@ jobs:
         os: [ ubuntu-latest, macos-latest, windows-latest ]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@v4.1.0
       - name: Set up Python
         uses: actions/setup-python@v4
         with:
@@ -79,7 +79,7 @@ jobs:
     needs: test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@v4.1.0
       - name: Download coverage reports
         uses: actions/download-artifact@v3
         with:
@@ -102,7 +102,7 @@ jobs:
         ports:
           - "3000:3000"
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@v4.1.0
       - name: Set up Python
         uses: actions/setup-python@v4
         with:

.github/workflows/preview_release_pr.yml

@@ -7,7 +7,7 @@ jobs:
     if: "!contains(github.event.head_commit.message, 'chore: prepare release')" # Skip merges from releases
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.1.0
         with:
           fetch-depth: 0
           token: ${{ secrets.PAT }}

.github/workflows/release-dry-run.yml

@@ -6,7 +6,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@v4.1.0
         with:
           fetch-depth: 0
           token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release.yml

@@ -10,7 +10,7 @@ jobs:
     if: github.head_ref == 'release' && github.event.pull_request.merged == true
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@v4.1.0
         with:
           fetch-depth: 0
           token: ${{ secrets.PAT }}