update ci conforming to gh security rules

Author: lovasoa

.github/workflows/CI.yml

@@ -12,7 +12,7 @@ jobs:
       with:
         path: '.emsdk-cache'
         key: emscripten-2.0.6
-    - uses: mymindstorm/setup-emsdk@ca33dc6
+    - uses: mymindstorm/setup-emsdk@ca33dc66a6b178f65393989c12e9465baf053352
       with:
         version: '2.0.6'
         actions-cache-folder: '.emsdk-cache'