Unify versions of GitHub actions we use, pin SHAs

Author: jason-rl

.github/workflows/ci.yml

@@ -19,10 +19,10 @@ jobs:
     runs-on: ${{ github.repository == 'stainless-sdks/runloop-python' && 'depot-ubuntu-24.04' || 'ubuntu-latest' }}
     if: github.event_name == 'push' || github.event.pull_request.head.repo.fork
     steps:
-      - uses: actions/checkout@v4
+      - uses: runloopai/checkout@main
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v5
+        uses: runloopai/setup-uv@main
         with:
           version: '0.8.11'
 
@@ -41,10 +41,10 @@ jobs:
       id-token: write
     runs-on: ${{ github.repository == 'stainless-sdks/runloop-python' && 'depot-ubuntu-24.04' || 'ubuntu-latest' }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: runloopai/checkout@main
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v5
+        uses: runloopai/setup-uv@main
         with:
           version: '0.8.11'
 
@@ -57,7 +57,7 @@ jobs:
       - name: Get GitHub OIDC Token
         if: github.repository == 'stainless-sdks/runloop-python'
         id: github-oidc
-        uses: actions/github-script@v6
+        uses: runloopai/github-script@main
         with:
           script: core.setOutput('github_token', await core.getIDToken());
 
@@ -75,10 +75,10 @@ jobs:
     runs-on: ${{ github.repository == 'stainless-sdks/runloop-python' && 'depot-ubuntu-24.04' || 'ubuntu-latest' }}
     if: github.event_name == 'push' || github.event.pull_request.head.repo.fork
     steps:
-      - uses: actions/checkout@v4
+      - uses: runloopai/checkout@main
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v5
+        uses: runloopai/setup-uv@main
         with:
           version: '0.8.11'
 

.github/workflows/publish-pypi.yml

@@ -14,10 +14,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: runloopai/checkout@main
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v5
+        uses: runloopai/setup-uv@main
         with:
           version: '0.8.11'
 

.github/workflows/release-doctor.yml

@@ -12,7 +12,7 @@ jobs:
     if: github.repository == 'runloopai/api-client-python' && (github.event_name == 'push' || github.event_name == 'workflow_dispatch' || startsWith(github.head_ref, 'release-please') || github.head_ref == 'next')
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: runloopai/checkout@main
 
       - name: Check release environment
         run: |

.github/workflows/smoketests.yml

@@ -17,10 +17,10 @@ jobs:
     timeout-minutes: 120
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: runloopai/checkout@main
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@v4
+        uses: runloopai/setup-uv@main
         with:
           python-version: "3.11"
 

.github/workflows/sphinx.yml

@@ -11,11 +11,11 @@ jobs:
     permissions:
       contents: write
     steps:
-    - uses: actions/checkout@v4
+    - uses: runloopai/checkout@main
       with:
         persist-credentials: false
     - name: Install uv
-      uses: astral-sh/setup-uv@v7
+      uses: runloopai/setup-uv@main
       with:
         version: '0.9.10'
     - name: Install dependencies
@@ -24,12 +24,12 @@ jobs:
       working-directory: docs
       run: uv run make html
     - name: Upload artifacts
-      uses: actions/upload-artifact@v4
+      uses: runloopai/upload-artifact@main
       with:
         name: html-docs
         path: docs/_build/html/
     - name: Deploy
-      uses: peaceiris/actions-gh-pages@v4
+      uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e
       if: github.ref == 'refs/heads/main'
       with:
         github_token: ${{ secrets.GITHUB_TOKEN }}