📌 pin CI action version tags (#728)

Author: jorenham

.github/workflows/ci.yml

@@ -23,7 +23,7 @@ jobs:
     timeout-minutes: 2
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.2.2
 
       - uses: scientific-python/[email protected]
         with:
@@ -35,7 +35,7 @@ jobs:
       - name: typos
         uses: crate-ci/[email protected]
 
-      - uses: astral-sh/setup-uv@v6
+      - uses: astral-sh/setup-uv@v6.3.1
         with:
           activate-environment: true
           python-version: "3.13"
@@ -47,7 +47,7 @@ jobs:
 
       # mypy_primer expects pyright to pass
       - name: pyright
-        uses: jakebailey/pyright-action@v2
+        uses: jakebailey/pyright-action@v2.3.2
 
   generate-matrix:
     name: Generate Test Matrix
@@ -58,10 +58,10 @@ jobs:
       matrix: ${{ steps.set-matrix.outputs.matrix }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.2.2
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v6.3.1
         with:
           python-version: "3.13"
 
@@ -82,10 +82,10 @@ jobs:
       matrix: ${{ fromJSON(needs.generate-matrix.outputs.matrix) }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.2.2
 
       - name: setup uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v6.3.1
         with:
           python-version: ${{ matrix.python }}
 

.github/workflows/publish-pypi.yml

@@ -19,14 +19,14 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.2.2
 
-      - uses: astral-sh/setup-uv@v6
+      - uses: astral-sh/setup-uv@v6.3.1
         with:
           python-version: "3.13"
 
       - name: uv build
         run: uv build
 
       - name: publish to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@v1.12.4