[Github] Pin Remaining Github Actions to SHAs (#166194)

We had a couple in the llvm/actions repository that were pinned to main. Pin them to the latest SHA in main to keep them consistent with everything else. These also ensures we are compliant with our own CI best practices and also cleans up the remaining CodeQL findings for this specific issue.

Author: boomanaiden154

.github/workflows/hlsl-test-all.yaml

@@ -54,7 +54,7 @@ jobs:
  path: golden-images
  - name: Setup Windows
  if: runner.os == 'Windows'
- uses: llvm/actions/setup-windows@main
+ uses: llvm/actions/setup-windows@42d80571b13f4599bbefbc7189728b64723c7f78 # main
  with:
  arch: amd64
  - name: Build DXC

.github/workflows/libclang-abi-tests.yml

@@ -100,7 +100,7 @@ jobs:
  repo: ${{ github.repository }}
  steps:
  - name: Install Ninja
- uses: llvm/actions/install-ninja@main
+ uses: llvm/actions/install-ninja@42d80571b13f4599bbefbc7189728b64723c7f78 # main
  - name: Install abi-compliance-checker
  run: |
  sudo apt-get update

.github/workflows/llvm-abi-tests.yml

@@ -88,7 +88,7 @@ jobs:
  repo: ${{ github.repository }}
  steps:
  - name: Install Ninja
- uses: llvm/actions/install-ninja@main
+ uses: llvm/actions/install-ninja@42d80571b13f4599bbefbc7189728b64723c7f78 # main
  - name: Install abi-compliance-checker
  run: |
  sudo apt-get update

.github/workflows/new-issues.yml

@@ -13,7 +13,7 @@ jobs:
  runs-on: ubuntu-24.04
  if: github.repository == 'llvm/llvm-project'
  steps:
- - uses: llvm/actions/issue-labeler@main
+ - uses: llvm/actions/issue-labeler@42d80571b13f4599bbefbc7189728b64723c7f78 # main
  with:
  repo-token: ${{ secrets.ISSUE_SUBSCRIBER_TOKEN }}
  configuration-path: .github/new-issues-labeler.yml

.github/workflows/premerge.yaml

@@ -190,7 +190,7 @@ jobs:
  with:
  max-size: "2000M"
  - name: Install Ninja
- uses: llvm/actions/install-ninja@main
+ uses: llvm/actions/install-ninja@42d80571b13f4599bbefbc7189728b64723c7f78 # main
  - name: Build and Test
  run: |
  source <(git diff --name-only HEAD~1...HEAD | python3 .ci/compute_projects.py)

.github/workflows/release-binaries.yml

@@ -177,7 +177,7 @@ jobs:
 
  - name: Setup Windows
  if: startsWith(runner.os, 'Windows')
- uses: llvm/actions/setup-windows@main
+ uses: llvm/actions/setup-windows@42d80571b13f4599bbefbc7189728b64723c7f78 # main
  with:
  arch: amd64