Merge pull request #79 from grafbase/fix/aikido-security-sast--4173241-hb53

[Aikido] AI Fix for 3rd party Github Actions should be pinned

Author: fbjork

.github/workflows/release-cli-extensions.yml

@@ -265,7 +265,7 @@ jobs:
 
       - name: Create GitHub Release
         id: create_release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # v2
         with:
           tag_name: ${{ matrix.extension }}-v${{ matrix.version }}
           name: ${{ matrix.extension }} v${{ matrix.version }}