fix: pin 5 unpinned action(s)

Automated security fixes applied by Runner Guard (https://github.com/Vigilant-LLC/runner-guard).

Changes:
 .github/workflows/create-cherry-pick-pr.yml | 2 +-
 .github/workflows/new-release-branch.yaml   | 2 +-
 .github/workflows/set-version.yaml          | 2 +-
 .github/workflows/sync-branch.yaml          | 2 +-
 .github/workflows/twoslash-repros.yaml      | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

Author: dagecko

.github/workflows/create-cherry-pick-pr.yml

@@ -177,7 +177,7 @@ jobs:
 
             return commentBody;
 
-      - uses: microsoft/typescript-bot-test-triggerer/.github/actions/post-workflow-result@master
+      - uses: microsoft/typescript-bot-test-triggerer/.github/actions/post-workflow-result@7676a9e9baa8a77a92206e4a9d434bbe45c81959 # master
         if: ${{ !cancelled() && inputs.distinct_id }}
         with:
           success_comment: ${{ steps.open-pr.outputs.result }}

.github/workflows/new-release-branch.yaml

@@ -87,7 +87,7 @@ jobs:
           git commit -m "Bump version to $PACKAGE_VERSION and LKG"
           git push --set-upstream origin "$BRANCH_NAME"
 
-      - uses: microsoft/typescript-bot-test-triggerer/.github/actions/post-workflow-result@master
+      - uses: microsoft/typescript-bot-test-triggerer/.github/actions/post-workflow-result@7676a9e9baa8a77a92206e4a9d434bbe45c81959 # master
         if: ${{ !cancelled() && inputs.distinct_id }}
         with:
           success_comment: "I've created ${{ inputs.branch_name }} with version ${{ inputs.package_version }} for you."

.github/workflows/set-version.yaml

@@ -90,7 +90,7 @@ jobs:
           git commit -m "Bump version to $PACKAGE_VERSION and LKG"
           git push
 
-      - uses: microsoft/typescript-bot-test-triggerer/.github/actions/post-workflow-result@master
+      - uses: microsoft/typescript-bot-test-triggerer/.github/actions/post-workflow-result@7676a9e9baa8a77a92206e4a9d434bbe45c81959 # master
         if: ${{ !cancelled() && inputs.distinct_id }}
         with:
           success_comment: "I've set the version of ${{ inputs.branch_name }} to ${{ inputs.package_version }} for you."

.github/workflows/sync-branch.yaml

@@ -64,7 +64,7 @@ jobs:
           git commit -m 'Update LKG'
           git push
 
-      - uses: microsoft/typescript-bot-test-triggerer/.github/actions/post-workflow-result@master
+      - uses: microsoft/typescript-bot-test-triggerer/.github/actions/post-workflow-result@7676a9e9baa8a77a92206e4a9d434bbe45c81959 # master
         if: ${{ !cancelled() && inputs.distinct_id }}
         with:
           success_comment: "I've pulled main into ${{ inputs.branch_name }} for you."

.github/workflows/twoslash-repros.yaml

@@ -60,7 +60,7 @@ jobs:
       - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: 'lts/*'
-      - uses: microsoft/TypeScript-Twoslash-Repro-Action@master
+      - uses: microsoft/TypeScript-Twoslash-Repro-Action@896a8519c4a94659aae0e27c9c92d6115bfb6ad8 # master
         with:
           github-token: ${{ secrets.TS_BOT_GITHUB_TOKEN }}
           issue: ${{ github.event.inputs.issue }}