Trigger canary when releasing new version

[HDegroote]

Also fixes the commit hashes for the external actions we use, as recommended by github to protect against supply-chain attacks