Unpinned dependency

[mrfelton]

This workflow generates a lock file with unpinned dependencies. Specifically:

      - name: Install gh-aw extension
        uses: github/gh-aw/actions/setup-cli@v0.72.1
        with:
          version: 'v0.77.5'

All deps must be pinned.

[mrfelton]

I believe this is actually a gh-aw issue. I filled it at github/gh-aw#38326