fix(security): autofix 3rd party Github Actions should be pinned

Author: aikido-autofix[bot]

.github/workflows/pull_request_maven_long_running.yml

@@ -95,7 +95,7 @@ jobs:
 
       # Build and test
       - name: "Setup GraalVM native image"
-        uses: graalvm/setup-graalvm@v1
+        uses: graalvm/setup-graalvm@01ed653ac833fe80569f1ef9f25585ba2811baab # v1
         with:
           java-version: ${{matrix.java-version}}
           distribution: 'graalvm-community'

.github/workflows/release.yml

@@ -51,7 +51,7 @@ jobs:
           cache: 'maven'
 
       - name: Set up Maven
-        uses: stCarolas/setup-maven@v5
+        uses: stCarolas/setup-maven@d6af6abeda15e98926a57b5aa970a96bb37f97d1 # v5
         with:
           maven-version: 3.9.3