actions: pin the hash of the check-spelling action (#20022)
In theory, somebody could compromise jsoref and push a new `v0.0.25` tag. As if.
D
dagecko committed
a7a928cfc9d03b568a17c00e96828d976dd55ebb
Parent: da0446a
Committed by GitHub <noreply@github.com>
on 3/26/2026, 3:53:26 PM