pin sub actions

Author: timkpaine

.github/workflows/build.yml

@@ -29,14 +29,14 @@ jobs:
       run: touch pyproject.toml
 
     - name: Setup Python
-      uses: actions-ext/python/setup@main
+      uses: ./python/setup
       with:
         version: ${{ matrix.python-version }}
 
     - name: Setup cibuildwheel
-      uses: actions-ext/python/setup-cibuildwheel@main
+      uses: ./python/setup-cibuildwheel
       with:
         version: ${{ matrix.python-version }}
 
     - name: Setup cibuildwheel caching
-      uses: actions-ext/python/setup-cibuildwheel-cache@main
+      uses: ./python/setup-cibuildwheel-cache

run-cibuildwheel/action.yml

@@ -27,7 +27,7 @@ runs:
   using: 'composite'
   steps:
     - name: Setup cibuildwheel caching
-      uses: actions-ext/python/setup-cibuildwheel@v1
+      uses: ./python/setup-cibuildwheel
       with:
         version: ${{ inputs.version }}
 

setup-cibuildwheel-cache/action.yml

@@ -30,7 +30,7 @@ runs:
       shell: python
 
     - name: Cache cibuildwheel tools
-      uses: actions/cache@v3
+      uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
       with:
         path: ${{ steps.cibuildwheel-cache.outputs.dir }}
         key: ${{ runner.os }}-cibuildwheel-${{ inputs.version }}

setup-cibuildwheel/action.yml

@@ -19,7 +19,7 @@ runs:
   using: 'composite'
   steps:
     - name: Setup cibuildwheel caching
-      uses: actions-ext/python/setup-cibuildwheel-cache@v1
+      uses: ./python/setup-cibuildwheel-cache
       with:
         version: ${{ inputs.version }}
 

setup/action.yml

@@ -24,14 +24,15 @@ runs:
   using: 'composite'
   steps:
     - name: Set up Python ${{ inputs.version }}
-      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
+      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+
       with:
         python-version: ${{ inputs.version }}
         allow-prereleases: true
       if: ${{ inputs.uv == 'true' }}
 
     - name: Set up Python ${{ inputs.version }}
-      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
+      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: ${{ inputs.version }}
         allow-prereleases: true
@@ -42,7 +43,7 @@ runs:
       if: ${{ inputs.uv != 'true' }}
 
     - name: Install uv
-      uses: astral-sh/setup-uv@v6
+      uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
       with:
         python-version: "${{ inputs.version }}"
         enable-cache: true

upload-dist/action.yml

@@ -13,14 +13,14 @@ runs:
   using: 'composite'
   steps:
     - name: Upload artifact (${{ inputs.kind }})
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
       with:
         name: ${{ inputs.kind }}
         path: 'dist/*.whl'
       if: ${{ inputs.kind == 'wheel' }}
 
     - name: Upload artifact (${{ inputs.kind }})
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
       with:
         name: ${{ inputs.kind }}
         path: 'dist/*.tar.gz'