Update GitHub Actions (#2940)

Author: cthoyt

.github/workflows/build.yml

@@ -15,25 +15,27 @@ jobs:
     runs-on: ubuntu-latest
     container: obolibrary/odkfull:v1.2.30
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false # otherwise, the token used is the GITHUB_TOKEN, instead of your personal token
           fetch-depth: 0 # otherwise, you will failed to push refs to dest repo
 
       - name: "Install uv"
-        uses: "astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57" # v8.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
 
       - name: Create local changes
         run: |
           python -m pip install -r requirements.txt
           make
+
       - name: Commit files
         run: |
           git config --local user.email "action@github.com"
           git config --local user.name "GitHub Action"
           git commit -m "🚀 Automatically rebuilt derived files" -a
+
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v3
+        uses: peter-evans/create-pull-request@18f7dc018cc2cd597073088f7c7591b9d1c02672 # v3.14.0
         with:
           commit-message: Update OBO foundry metadata
           title: 'Update OBO foundry metadata'

.github/workflows/obo-test.yml

@@ -13,17 +13,19 @@ jobs:
     runs-on: ubuntu-latest
     if: github.triggering_actor != 'github-actions[bot]'
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: "Install uv"
-        uses: "astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57" # v8.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
-          python-version: '3.9'
+          python-version: '3.14'
+
       - name: Install requirements
         run: |
           python3 -m pip install -r requirements.txt
+
       - name: Run tests
         run: |
           make test

.github/workflows/qa.yml

@@ -7,18 +7,18 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     if: github.triggering_actor != 'github-actions[bot]'
-    strategy:
-      matrix:
-        python-version: [ "3.8", "3.10" ]
     steps:
-      - uses: actions/checkout@v7
-      - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Set up Python
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
-          python-version: ${{ matrix.python-version }}
+          python-version: '3.14'
+
       - name: Install dependencies
         run: |
           pip install --upgrade pip setuptools wheel
           pip install "tox<4.0.0"
+
       - name: Check code quality with flake8
         run: tox -e flake8

requirements.txt

@@ -1,4 +1,4 @@
-pyyaml==5.4
+pyyaml==6.0.3
 jsonschema==3.0.2
 SPARQLWrapper
 requests==2.31.0