Pin workflow actions (#1687)

Summary:
Pull Request resolved: https://github.com/facebook/flipper/pull/1687

I cleaned up and tagged both of the custom actions.
It's much better to pin them down properly so that
future changes on `main` don't break anything.

Reviewed By: nikoant

Differential Revision: D24996462

fbshipit-source-id: 6d63e76b758439ba8df4ef2f5b77992789744e7b

.github/workflows/release.yml

@@ -12,7 +12,7 @@ jobs:
     outputs:
       tag: ${{ steps.tag-version-commit.outputs.tag }}
     steps:
-      - uses: passy/extract-version-commit@main
+      - uses: passy/extract-version-commit@v1
         id: extract-version-commit
         with:
           version_regex: '^Flipper Release: v([0-9]+\.[0-9]+\.[0-9]+)(?:\n|$)'
@@ -23,7 +23,7 @@ jobs:
       - name: Tag version commit
         if: ${{ steps.extract-version-commit.outputs.commit != ''}}
         id: tag-version-commit
-        uses: passy/tag-version-commit@master
+        uses: passy/tag-version-commit@v1.2.0
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           ref: ${{ steps.extract-version-commit.outputs.commit }}