deps: upgrade cargo semver-checks to v0.24

I've also changed our use of the action to pin by Git hash as per our policy for external actions.

See https://github.com/obi1kenobi/cargo-semver-checks/releases/tag/v0.24.0 for details on the release.

Pull-Request: #4603.

.github/workflows/ci.yml

@@ -263,9 +263,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - run: wget -q -O- https://github.com/obi1kenobi/cargo-semver-checks/releases/download/v0.23.0/cargo-semver-checks-x86_64-unknown-linux-gnu.tar.gz | tar -xz -C ~/.cargo/bin
+      - run: wget -q -O- https://github.com/obi1kenobi/cargo-semver-checks/releases/download/v0.24.0/cargo-semver-checks-x86_64-unknown-linux-gnu.tar.gz | tar -xz -C ~/.cargo/bin
         shell: bash
-      - uses: obi1kenobi/cargo-semver-checks-action@v2
+      - uses: obi1kenobi/cargo-semver-checks-action@e275dda72e250d4df5b564e969e1348d67fefa52 # v2
 
   rustfmt:
     runs-on: ubuntu-latest