Gh Actions Lock

GitHub Actions adds workflow lockfiles via new gh-actions-lock tool

GitHub Actions now supports lockfiles that let workflows reference version tags like v7.0.1 instead of full commit SHAs while still pinning to a specific commit. A new gh CLI extension, gh-actions-lock, generates a .github/workflows/actions.lock file recording the exact commit hash tied to each tag used in a repo's workflows.