pin gh actions (#234)

gh actions pinning

Author: sundarshankar89

.github/workflows/acceptance.yml

@@ -49,7 +49,7 @@ jobs:
           git fetch origin $GITHUB_HEAD_REF:$GITHUB_HEAD_REF
 
       - name: Run integration tests
-        uses: databrickslabs/sandbox/acceptance@acceptance/v0.4.2
+        uses: databrickslabs/sandbox/acceptance@3313d06ce86227537b3f37f5974f7eecb2a8e59a  # acceptance/v0.4.4
         with:
           vault_uri: ${{ secrets.VAULT_URI }}
         env:

.github/workflows/downstreams.yml

@@ -52,7 +52,7 @@ jobs:
           pip install "hatch==${HATCH_VERSION}"
 
       - name: Downstreams
-        uses: databrickslabs/sandbox/downstreams@acceptance/v0.4.2
+        uses: databrickslabs/sandbox/downstreams@3313d06ce86227537b3f37f5974f7eecb2a8e59a  # acceptance/v0.4.4  # downstreams/v0.0.1
         with:
           repo: ${{ matrix.downstream.name }}
           org: databrickslabs

.github/workflows/nightly.yml

@@ -39,7 +39,7 @@ jobs:
         run: pip install "hatch==${HATCH_VERSION}"
 
       - name: Run nightly tests
-        uses: databrickslabs/sandbox/acceptance@acceptance/v0.4.2
+        uses: databrickslabs/sandbox/acceptance@3313d06ce86227537b3f37f5974f7eecb2a8e59a  # acceptance/v0.4.4
         with:
           vault_uri: ${{ secrets.VAULT_URI }}
           create_issues: true

.github/workflows/push.yml

@@ -50,7 +50,7 @@ jobs:
         run: make test
 
       - name: Publish test coverage
-        uses: odecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de  # v5.5.2
+        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de  # v5.5.2
         with:
           token: ${{ secrets.CODECOV_TOKEN }}