feat: Add sha_pinning_required to ActionsPermissions structs

[sheeeng]

Support https://github.blog/changelog/2025-08-15-github-actions-policy-now-supports-blocking-and-sha-pinning-actions/#enforce-sha-pinning.

Fix#3808.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.27%. Comparing base (943b801) to head (cb55bd5).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@ Coverage Diff @@## master #3807 +/- ##
=======================================
Coverage 92.27% 92.27% =======================================
Files 192 192 Lines 13896 13896 =======================================
Hits 12823 12823 Misses 884 884 Partials 189 189 

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[gmlewis]

Thank you, @sheeeng!
LGTM.
Merging.

[sheeeng]

@gmlewis, thanks for the review. Do you have any time estimation for this fix to be included in the next release?

[gmlewis]

@gmlewis, thanks for the review. Do you have any time estimation for this fix to be included in the next release?

Usually we cut a release about once per month (and we just cut one 4 days ago), but if there is a need, we can cut another one sooner.

[sheeeng]

@gmlewis, thanks for the review. Do you have any time estimation for this fix to be included in the next release?

Usually we cut a release about once per month (and we just cut one 4 days ago), but if there is a need, we can cut another one sooner.

@gmlewis, thanks for the quick response. If there is any possibility to release earlier, it would be much appreciated. 🙇 However, it's not urgent. I am waiting to support this feature in integrations/terraform-provider-github#2870.

[gmlewis]

@gmlewis, thanks for the quick response. If there is any possibility to release earlier, it would be much appreciated. 🙇 However, it's not urgent. I am waiting to support this feature in integrations/terraform-provider-github#2870.

@sheeeng - this has now been released here:
https://github.com/google/go-github/releases/tag/v78.0.0