feat: pin action versions

Author: nijel

.github/workflows/ci.yml

@@ -32,21 +32,21 @@ jobs:
         - runner: ubuntu-22.04
           target: ppc64le
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       with:
         persist-credentials: false
-    - uses: actions/setup-python@v5
+    - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
       with:
         python-version: 3.x
     - name: Build wheels
-      uses: PyO3/maturin-action@v1
+      uses: PyO3/maturin-action@v1.49.4
       with:
         target: ${{ matrix.platform.target }}
         args: --release --out dist
         sccache: false
         manylinux: auto
     - name: Build free-threaded wheels
-      uses: PyO3/maturin-action@v1
+      uses: PyO3/maturin-action@v1.49.4
       with:
         target: ${{ matrix.platform.target }}
         args: --release --out dist -i python3.13t,python3.14t
@@ -72,21 +72,21 @@ jobs:
         - runner: ubuntu-22.04
           target: armv7
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       with:
         persist-credentials: false
-    - uses: actions/setup-python@v5
+    - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
       with:
         python-version: 3.x
     - name: Build wheels
-      uses: PyO3/maturin-action@v1
+      uses: PyO3/maturin-action@v1.49.4
       with:
         target: ${{ matrix.platform.target }}
         args: --release --out dist
         sccache: false
         manylinux: musllinux_1_2
     - name: Build free-threaded wheels
-      uses: PyO3/maturin-action@v1
+      uses: PyO3/maturin-action@v1.49.4
       with:
         target: ${{ matrix.platform.target }}
         args: --release --out dist -i python3.13t,python3.14t
@@ -109,25 +109,25 @@ jobs:
         - runner: windows-latest
           target: x86
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       with:
         persist-credentials: false
-    - uses: actions/setup-python@v5
+    - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
       with:
         python-version: 3.x
         architecture: ${{ matrix.platform.target }}
     - name: Build wheels
-      uses: PyO3/maturin-action@v1
+      uses: PyO3/maturin-action@v1.49.4
       with:
         target: ${{ matrix.platform.target }}
         args: --release --out dist
         sccache: false
-    - uses: actions/setup-python@v5
+    - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
       with:
         python-version: 3.13t
         architecture: ${{ matrix.platform.target }}
     - name: Build free-threaded wheels
-      uses: PyO3/maturin-action@v1
+      uses: PyO3/maturin-action@v1.49.4
       with:
         target: ${{ matrix.platform.target }}
         args: --release --out dist -i python3.13t,python3.14t
@@ -148,20 +148,20 @@ jobs:
         - runner: macos-14
           target: aarch64
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       with:
         persist-credentials: false
-    - uses: actions/setup-python@v5
+    - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
       with:
         python-version: 3.x
     - name: Build wheels
-      uses: PyO3/maturin-action@v1
+      uses: PyO3/maturin-action@v1.49.4
       with:
         target: ${{ matrix.platform.target }}
         args: --release --out dist
         sccache: false
     - name: Build free-threaded wheels
-      uses: PyO3/maturin-action@v1
+      uses: PyO3/maturin-action@v1.49.4
       with:
         target: ${{ matrix.platform.target }}
         args: --release --out dist -i python3.13t,python3.14t
@@ -176,11 +176,11 @@ jobs:
   sdist:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       with:
         persist-credentials: false
     - name: Build sdist
-      uses: PyO3/maturin-action@v1
+      uses: PyO3/maturin-action@v1.49.4
       with:
         command: sdist
         args: --out dist
@@ -210,7 +210,7 @@ jobs:
         subject-path: wheels-*/*
     - name: Publish to PyPI
       if: ${{ startsWith(github.ref, 'refs/tags/') }}
-      uses: PyO3/maturin-action@v1
+      uses: PyO3/maturin-action@v1.49.4
       with:
         command: upload
         args: --non-interactive --skip-existing wheels-*/*