Merge pull request #261 from target/pin-coursier

Pin coursier/setup-action version in release.yaml

Author: colindean

.github/workflows/release.yaml

@@ -19,7 +19,7 @@ jobs:
       - uses: coursier/cache-action@bebeeb0e6f48ebad66d3783946588ecf43114433 # v7.0.0
         with:
           extraKey: ${{ runner.os }}
-      - uses: coursier/setup-action@v1
+      - uses: coursier/setup-action@039f736548afa5411c1382f40a5bd9c2d30e0383 # v1.3.9
         with:
           jvm: adopt:1.8
       # uses sbt-github-packages, see build.sbt