ci: pin trusted publishing release tooling

Author: favoyang

.github/workflows/ci.yml

@@ -37,7 +37,6 @@ jobs:
       uses: actions/setup-node@v6
       with:
         node-version: 24
-        registry-url: https://registry.npmjs.org
     - name: Use npm with trusted publishing support
       run: npm install -g npm@11.13.0
     - name: Show release tool versions
@@ -52,10 +51,11 @@ jobs:
     - name: Release
       uses: cycjimmy/semantic-release-action@v6
       with:
+        semantic_version: 25.0.3
         extra_plugins: |
           @semantic-release/npm@13.1.5
-          @semantic-release/changelog
-          @semantic-release/git
+          @semantic-release/changelog@6.0.3
+          @semantic-release/git@10.0.1
         branches: master
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}