Pin third party actions to commit SHA

Author: dg-blackjack-bot[bot]

.github/workflows/automate-stale.yml

@@ -8,7 +8,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/[email protected]
+      - uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9.0.0
         id: stale
         with:
           stale-issue-message: >

.github/workflows/lint.yml

@@ -6,8 +6,8 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: 3.13
-      - uses: psf/black@stable
+      - uses: psf/black@af0ba72a73598c76189d6dd1b21d8532255d5942 # stable

.github/workflows/pypi-publish.yml

@@ -18,9 +18,9 @@ jobs:
 
     steps:
       # Publish mkdocs-techdocs-core to PyPI
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@master
+        uses: actions/setup-python@2241d846baea6518b39bec0fb3859d75cb3d3c50 # master-2025-09-27
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install pip, setuptools, and wheel
@@ -38,7 +38,7 @@ jobs:
             rm -fr ${distrib}
           popd >/dev/null || exit
       - name: Publish a Python distribution to PyPI
-        uses: pypa/[email protected]
+        uses: pypa/gh-action-pypi-publish@15c56dba361d8335944d31a2ecd17d700fc7bcbc # v1.12.2
         with:
           user: __token__
           password: ${{ secrets.PYPI_API_KEY }}

.github/workflows/test.yml

@@ -11,9 +11,9 @@ jobs:
       matrix:
         python-version: [3.9, "3.10", 3.11, 3.12, 3.13]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install dependencies

.github/workflows/validate-renovate.yml

@@ -13,8 +13,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Validate
-        uses: rinchsan/[email protected]
+        uses: rinchsan/renovate-config-validator@a12a2b98cd4db923c33d1ce407c57afb43f3ff59 # v0.2.0
         with:
           pattern: '*.json5'