ci: pin third-party actions to Apache-approved SHAs (#3172)

Author: kevinjqliu

.github/workflows/nightly-pypi-build.yml

@@ -43,7 +43,7 @@ jobs:
           python-version: 3.12
 
       - name: Install UV
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
 
       - name: Set version
         id: set-version

.github/workflows/pypi-build-artifacts.yml

@@ -52,7 +52,7 @@ jobs:
             3.13
 
       - name: Install UV
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
 
       - name: Set version with RC
         env:

.github/workflows/python-ci-docs.yml

@@ -43,7 +43,7 @@ jobs:
         with:
           python-version: 3.12
       - name: Install UV
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
       - name: Build docs
         run: make docs-build
       - name: Run linters

.github/workflows/python-ci.yml

@@ -60,7 +60,7 @@ jobs:
       with:
         python-version: ${{ matrix.python }}
     - name: Install UV
-      uses: astral-sh/setup-uv@v7
+      uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
       with:
         enable-cache: true
     - name: Install system dependencies
@@ -84,7 +84,7 @@ jobs:
       with:
         python-version: '3.12'
     - name: Install UV
-      uses: astral-sh/setup-uv@v7
+      uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
       with:
         enable-cache: true
     - name: Install system dependencies
@@ -111,7 +111,7 @@ jobs:
       with:
         python-version: '3.12'
     - name: Install UV
-      uses: astral-sh/setup-uv@v7
+      uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
       with:
         enable-cache: true
     - name: Install system dependencies
@@ -138,7 +138,7 @@ jobs:
       with:
         python-version: '3.12'
     - name: Install UV
-      uses: astral-sh/setup-uv@v7
+      uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
       with:
         enable-cache: true
     - name: Install system dependencies
@@ -165,7 +165,7 @@ jobs:
       with:
         python-version: '3.12'
     - name: Install UV
-      uses: astral-sh/setup-uv@v7
+      uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
       with:
         enable-cache: true
     - name: Install system dependencies
@@ -193,7 +193,7 @@ jobs:
       with:
         python-version: '3.12'
     - name: Install UV
-      uses: astral-sh/setup-uv@v7
+      uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
       with:
         enable-cache: true
     - name: Install dependencies
@@ -214,7 +214,7 @@ jobs:
       with:
         python-version: '3.12'
     - name: Install UV
-      uses: astral-sh/setup-uv@v7
+      uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
       with:
         enable-cache: true
     # Why this exists:

.github/workflows/python-release-docs.yml

@@ -40,7 +40,7 @@ jobs:
         with:
           python-version: 3.12
       - name: Install UV
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
       - name: Build docs
         run: make docs-build
       - name: Copy

.github/workflows/python-release.yml

@@ -101,7 +101,7 @@ jobs:
           python-version: 3.12
 
       - name: Install UV
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
 
       - name: Validate current pyiceberg version
         env:

.github/workflows/svn-build-artifacts.yml

@@ -52,7 +52,7 @@ jobs:
             3.13
 
       - name: Install UV
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
 
       # Publish the source distribution with the version that's in
       # the repository, otherwise the tests will fail