chore(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	pinDigest	-> 11bd719
actions/setup-python	action	pinDigest	-> 4237552
amannn/action-semantic-pull-request	action	pinDigest	-> 0723387
codecov/codecov-action	action	pinDigest	-> 13ce06b
github/codeql-action	action	pinDigest	-> dd74661
googleapis/release-please-action	action	pinDigest	-> db8f2c6
pre-commit/action	action	pinDigest	-> 2c7b380

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 97.55%. Comparing base (e705af4) to head (df9b8a3).
Report is 1 commits behind head on main.

Additional details and impacted files

@@ Coverage Diff @@## main #435 +/- ##
=======================================
Coverage 97.55% 97.55% =======================================
Files 31 31 Lines 1393 1393 =======================================
Hits 1359 1359 Misses 34 34 

Flag	Coverage Δ
unittests	97.55% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.