1.14.8a
ci: pin third-party actions to commit SHAs (#5869)
ci: pin third-party actions to commit SHAs
ci: ignore GHSA-rrmf-rvhw-rf47 (torch alias of PYSEC-2025-194)