Pin jellyfin/jellyfin-packaging action to 12a5fb7

.github/workflows/project-automation.yml

@@ -18,7 +18,7 @@ jobs:
     if: ${{ github.repository == 'jellyfin/jellyfin' && (github.event_name != 'pull_request_target' || github.event.pull_request.head.repo.full_name == github.repository) }}
     steps:
       - name: Update project board
-        uses: jellyfin/jellyfin-packaging/.github/actions/project-automation@master
+        uses: jellyfin/jellyfin-packaging/.github/actions/project-automation@12a5fb713de032ee311b5ec9c2639293aa329665 # master
         with:
           github-token: ${{ secrets.GH_PROJECTS_TOKEN }}
           repo: jellyfin