ci: pin third-party GitHub Actions to verified release SHAs

[Vamshi-Microsoft]

Purpose

• Pin third-party GitHub Actions to specific release commit SHAs (instead of mutable version tags) for reproducible and immutable workflow runs.
• Replace the tj-actions/changed-files action in the broken-link checker with a built-in git diff step, which removes a third-party dependency from change detection.

Changes:

• .github/workflows/broken-links-checker.yml — replace tj-actions/changed-files with a built-in git diff step; pin lycheeverse/lychee-action to 8646ba3 (v2.8.0).
• .github/workflows/pr-title-checker.yml — pin amannn/action-semantic-pull-request to 48f2562 (v6.1.1).

Does this introduce a breaking change?

• Yes
• No

Golden Path Validation

• I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.

Deployment Validation

• I have validated the deployment process successfully and all services are running as expected with this change.

What to Check

Verify that the following are valid

• ...

Other Information

[Copilot]

Pull request overview

This PR hardens CI security and reproducibility by pinning third-party GitHub Actions to immutable, verified release commit SHAs, and reduces third-party dependency surface area by replacing tj-actions/changed-files with a native git diff step for markdown change detection.

Changes:

• Pin amannn/action-semantic-pull-request to the verified v6.1.1 commit SHA.
• Replace tj-actions/changed-files with a built-in git diff-based output step for changed markdown files in PRs.
• Pin lycheeverse/lychee-action to the verified v2.8.0 commit SHA for both PR and manual runs.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/workflows/pr-title-checker.yml	Pins the semantic PR title check action to an immutable, verified v6.1.1 commit SHA for reproducible runs.
.github/workflows/broken-links-checker.yml	Removes a third-party “changed files” action in favor of git diff and pins the lychee action to an immutable, verified v2.8.0 commit SHA.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.