Update GitHub Actions to use latest action versions for Python and Docker setup

Author: tae898

.github/workflows/deploy-python-docs.yml

@@ -60,14 +60,14 @@ jobs:
       
       - name: Checkout repository
         if: github.event_name != 'release' || steps.check-python-release.outputs.is-python-release == 'true'
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           fetch-depth: 0  # Full history for mike versioning
           token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Set up Python
         if: github.event_name != 'release' || steps.check-python-release.outputs.is-python-release == 'true'
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
         with:
           python-version: '3.11'
           cache: 'pip'

.github/workflows/release-python-packages.yml

@@ -52,18 +52,18 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
 
       - name: Build ${{ matrix.distribution }} distribution
         run: |
           cd bindings/python
           ./build-all.sh ${{ matrix.distribution }}
       
       - name: Upload wheel artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: wheel-${{ matrix.distribution }}
           path: bindings/python/dist/*.whl
@@ -79,7 +79,7 @@ jobs:
       id-token: write
     steps:
       - name: Download headless wheel
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
         with:
           name: wheel-headless
           path: dist/
@@ -96,7 +96,7 @@ jobs:
       id-token: write
     steps:
       - name: Download minimal wheel
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
         with:
           name: wheel-minimal
           path: dist/
@@ -113,7 +113,7 @@ jobs:
       id-token: write
     steps:
       - name: Download full wheel
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
         with:
           name: wheel-full
           path: dist/

.github/workflows/test-python-bindings.yml

@@ -52,10 +52,10 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
 
       - name: Build and test ${{ matrix.distribution }} distribution
         run: |
@@ -72,12 +72,12 @@ jobs:
           cp dist/*${{ matrix.distribution }}*.whl test-install/ || cp dist/*.whl test-install/
       
       - name: Set up Python for host testing
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
         with:
           python-version: '3.11'
 
       - name: Install Java (required for JPype)
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
         with:
           distribution: 'temurin'
           java-version: '21'
@@ -151,7 +151,7 @@ jobs:
       
       - name: Upload test results
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: test-results-${{ matrix.distribution }}
           path: |
@@ -160,7 +160,7 @@ jobs:
           retention-days: 7
 
       - name: Upload wheel artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: wheel-${{ matrix.distribution }}-test
           path: bindings/python/dist/*.whl