chore(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	pinDigest	-> 11bd719
actions/setup-python	action	pinDigest	-> 4237552
amannn/action-semantic-pull-request	action	pinDigest	-> 0723387
codecov/codecov-action	action	pinDigest	-> 13ce06b
github/codeql-action	action	pinDigest	-> dd74661
googleapis/release-please-action	action	pinDigest	-> db8f2c6
pre-commit/action	action	pinDigest	-> 2c7b380

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 97.55%. Comparing base (e705af4) to head (df9b8a3).
Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #435   +/-   ##
=======================================
  Coverage   97.55%   97.55%           
=======================================
  Files          31       31           
  Lines        1393     1393           
=======================================
  Hits         1359     1359           
  Misses         34       34           

Flag	Coverage Δ
unittests	97.55% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.