Pin marketplace actions + release notes

Author: mrexodia

.github/workflows/build.yml

@@ -9,42 +9,45 @@ jobs:
     runs-on: windows-2019
     steps:
     - name: Checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
       with:
         fetch-depth: 0
-      # toolset should be 14.27, but it's not installed on Github. release.bat will help out here instead so we will eventually get a 14.27 env
+
     - name: Setup VS environment
-      uses: ilammy/[email protected]
+      uses: ilammy/msvc-dev-cmd@cec98b9d092141f74527d0afa6feb2af698cfe89 # v1.12.0
       with:
         #vsversion: 2019 # blows up on github. lol...
+        # toolset should be 14.27, but it's not installed on Github. release.bat will help out here instead so we will eventually get a 14.27 env
         toolset: 14.29
+
     - name: Build
       run: |
         cmd /c call release.bat
 
     - name: Get current time
-      uses: srfrnk/[email protected]
+      uses: srfrnk/current-time@5a4163ad035ccd9a407ec9e519c3b6ba1b633d1e # v1.1.0
       id: current-time
       with:
         format: YYYY-MM-DD_HH-MM
 
-    - uses: actions/upload-artifact@v2
+    - uses: actions/upload-artifact@v3
       with:
         name: ${{ github.event.repository.name }}_${{ steps.current-time.outputs.formattedTime }}
         path: Release/
 
     - name: Compress artifacts
-      uses: papeloto/action-zip@v1
+      uses: vimtor/action-zip@26a249fb00d43ca98dad77a4b3838025fc226aa1 # v1.1
       if: ${{ startsWith(github.ref, 'refs/tags/') }}
       with:
         files: Release/
         dest: ${{ github.event.repository.name }}_${{ steps.current-time.outputs.formattedTime }}.zip
 
     - name: Release
-      uses: softprops/action-gh-release@v1
+      uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15
       if: ${{ startsWith(github.ref, 'refs/tags/') }}
       with:
         prerelease: ${{ !startsWith(github.ref, 'refs/tags/v') || contains(github.ref, '-pre') }}
         files: ${{ github.event.repository.name }}_${{ steps.current-time.outputs.formattedTime }}.zip
+        generate_release_notes: true
       env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}