ci: pin versions in workflows

Author: linuxdaemon

.github/workflows/pre-commit-update.yml

@@ -5,6 +5,9 @@ on:
     - cron: '0 3 * * 1' # Every Monday at 03:00 UTC
   workflow_dispatch:
 
+env:
+  HATCH_VERSION: "1.14.1"
+
 jobs:
   update-pre-commit-config:
     runs-on: ubuntu-latest
@@ -18,7 +21,9 @@ jobs:
           python-version: '3.13'
 
       - name: Install Hatch
-        run: pip install --upgrade hatch
+        uses: pypa/hatch@install
+        with:
+          version: "${{ env.HATCH_VERSION }}"
 
       - name: Set up Git user
         run: |
@@ -28,18 +33,7 @@ jobs:
       - name: Update .pre-commit-config.yaml
         run: hatch run pre-commit autoupdate --freeze
 
-      - name: Check for changes
-        id: changes
-        run: |
-          git add .pre-commit-config.yaml
-          if git diff --cached --quiet; then
-            echo "changed=false" >> $GITHUB_OUTPUT
-          else
-            echo "changed=true" >> $GITHUB_OUTPUT
-          fi
-
       - name: Create Pull Request
-        if: steps.changes.outputs.changed == 'true'
         uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7
         with:
           commit-message: "chore(deps): Update .pre-commit-config.yaml"

.github/workflows/python-publish.yml

@@ -2,6 +2,9 @@ name: Build and Publish
 
 on: [push]
 
+env:
+  HATCH_VERSION: "1.14.1"
+
 jobs:
   build:
     name: Build distribution 📦
@@ -14,9 +17,10 @@ jobs:
         with:
           python-version: "3.x"
 
-      - name: Install hatch
-        run: >-
-          python3 -m pip install --upgrade hatch --user
+      - name: Install Hatch
+        uses: pypa/hatch@install
+        with:
+          version: "${{ env.HATCH_VERSION }}"
 
       - name: Build a binary wheel and a source tarball
         run: hatch build
@@ -46,4 +50,4 @@ jobs:
           path: dist/
 
       - name: Publish distribution 📦 to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@v1.13.0