fix(github-actions): pin dependencies (#138)

* fix(github-actions): pin dependencies

* fix(deps): keep python constraint at ^3.13

Signed-off-by: Jimisola Laursen <jimisola@jimisola.com>

---------

Signed-off-by: Jimisola Laursen <jimisola@jimisola.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Jimisola Laursen <jimisola@jimisola.com>

Author: renovate[bot]

.github/workflows/build.yml

@@ -44,18 +44,18 @@ jobs:
       # Full history and tags: poetry-dynamic-versioning derives the version from git state, so a
       # shallow clone would build the wrong number rather than fail.
       - name: Check out source repository
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
         with:
           persist-credentials: false
           fetch-depth: 0
           fetch-tags: true
           ref: ${{ inputs.ref || github.ref }}
       - name: Set up Python
-        uses: actions/setup-python@v7
+        uses: actions/setup-python@v7.0.0
         with:
-          python-version: "3.13"
+          python-version: "3.13.15"
       - name: Install and configure Poetry
-        uses: snok/install-poetry@a783c322200f0519c7926aa6faa857c4e23e9263 # v1
+        uses: snok/install-poetry@a783c322200f0519c7926aa6faa857c4e23e9263 # v1.4.2
         with:
           version: 2.5.1
           virtualenvs-create: true
@@ -86,7 +86,7 @@ jobs:
       # Upload artifacts for later use
       - name: Upload Artifacts
         if: matrix.reqstool-source == 'pypi'
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: ${{ inputs.artifact-name || 'dist' }}
           path: dist/

.github/workflows/lint.yml

@@ -11,13 +11,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out source repository
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
       - name: Set up Python
-        uses: actions/setup-python@v7
+        uses: actions/setup-python@v7.0.0
         with:
-          python-version: "3.13"
+          python-version: "3.13.15"
       - name: Install and configure Poetry (this should ideally be done from pyproject.toml but..)
-        uses: snok/install-poetry@a783c322200f0519c7926aa6faa857c4e23e9263 # v1
+        uses: snok/install-poetry@a783c322200f0519c7926aa6faa857c4e23e9263 # v1.4.2
         with:
           version: 2.5.1
           virtualenvs-create: true