Pin GitHub Actions to full-length commit SHAs (#2023)

Author: danfiedler-msft

.github/dependabot.yml

@@ -19,6 +19,8 @@ updates:
     directory: /
     schedule:
       interval: daily
+    cooldown:
+      default-days: 7
 
   - package-ecosystem: nuget
     directory: /
@@ -28,4 +30,4 @@ updates:
   - package-ecosystem: nuget
     directory: /test/perf/benchmarks
     schedule:
-      interval: daily
+      interval: daily

.github/workflows/codeql-analysis.yml

@@ -38,7 +38,7 @@ jobs:
     - name: Checkout repository
       uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
 
-    - uses: actions/setup-dotnet@v4
+    - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4.3.1
       with:
         global-json-file: global.json