Previously versions were using tags. By pinning them to SHAs, it ensures the versions cannot be changed. Also note that I used the latest release, so many of the actions received a version bump as part of this change.
Carter Jernigan