pin latest version of setup-go

This isn't a tagged release yet, but supports a feature we want that
will be released soon. I am monitoring the upstream issue for when we
can switch back to tags.

Author: keegancsmith

.github/workflows/go-ci.yml

@@ -17,7 +17,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
       - name: Set up Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@faf52423ec0d44c58f68e83b614bfcd99dded66f
         with:
           go-version-file: '.tool-versions'
       - name: (Windows) Enable pulling Go modules from private sourcegraph/sourcegraph

.github/workflows/go-lint.yml

@@ -14,7 +14,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
       - name: Set up Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@faf52423ec0d44c58f68e83b614bfcd99dded66f
         with:
           go-version-file: '.tool-versions'
       - name: Enable pulling Go modules from private sourcegraph/sourcegraph

.github/workflows/goreleaser-check.yml

@@ -17,7 +17,7 @@ jobs:
         with:
           fetch-depth: 0
       - name: Set up Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@faf52423ec0d44c58f68e83b614bfcd99dded66f
         with:
           go-version-file: '.tool-versions'
       - name: Enable pulling Go modules from private sourcegraph/sourcegraph

.github/workflows/goreleaser.yml

@@ -179,7 +179,7 @@ jobs:
         with:
           fetch-depth: 0
       - name: Set up Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@faf52423ec0d44c58f68e83b614bfcd99dded66f
         with:
           go-version-file: '.tool-versions'
       - name: Enable pulling Go modules from private sourcegraph/sourcegraph

.github/workflows/pr-auditor.yml

@@ -13,7 +13,7 @@ jobs:
         with:
           repository: 'sourcegraph/devx-service'
           token: ${{ secrets.PR_AUDITOR_TOKEN }}
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@faf52423ec0d44c58f68e83b614bfcd99dded66f
         with: { go-version-file: '.tool-versions' }
 
       - run: 'go run ./cmd/pr-auditor'

.github/workflows/scip.yml

@@ -12,7 +12,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Set up Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@faf52423ec0d44c58f68e83b614bfcd99dded66f
         with:
           go-version-file: '.tool-versions'