Update branch.yml

Pinning action to a full length commit SHA [see](https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#using-third-party-actions)

Author: ismisepaul

.github/workflows/branch.yml

@@ -38,7 +38,7 @@ jobs:
         run: make patch
 
       - name: Create new branch and commit changes to the minor branch
-        uses: EndBug/add-and-commit@v9
+        uses: EndBug/add-and-commit@050a66787244b10a4874a2a5f682130263edc192  # v9.0.0
         with:
           default_author: user_info
           message: 'Update patch version'
@@ -67,7 +67,7 @@ jobs:
         run: make minor; git diff
 
       - name: Commit changes to main
-        uses: EndBug/add-and-commit@v9
+        uses: EndBug/add-and-commit@050a66787244b10a4874a2a5f682130263edc192  # v9.0.0
         with:
           default_author: user_info
           message: 'Update minor version'