Bump the github-actions group across 1 directory with 2 updates (#18)

Bumps the github-actions group with 2 updates in the / directory:
[actions/checkout](https://github.com/actions/checkout) and
[ncipollo/release-action](https://github.com/ncipollo/release-action).

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/buildReleaseAndPublish.yml

@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: Checkout torch-mlir
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           repository: llvm/torch-mlir
           ref: refs/heads/main
@@ -60,7 +60,7 @@ jobs:
           path: dist
 
       - name: Release python wheels
-        uses: ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174 # v.1.16.0
+        uses: ncipollo/release-action@bcfe5470707e8832e12347755757cec0eb3c22af # v.1.18.0
         with:
           artifacts: dist/*.whl
           token: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/buildReleaseAndPublishWindows.yml

@@ -35,7 +35,7 @@ jobs:
 
     steps:
       - name: Checkout torch-mlir
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           repository: llvm/torch-mlir
           ref: refs/heads/main
@@ -69,7 +69,7 @@ jobs:
           path: dist
 
       - name: Release python wheels
-        uses: ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174 # v1.16.0
+        uses: ncipollo/release-action@bcfe5470707e8832e12347755757cec0eb3c22af # v1.18.0
         with:
           artifacts: dist/*.whl
           token: "${{ secrets.GITHUB_TOKEN }}"