ci: unify versions of GitHub actions we use, pin SHAs (#657)

Author: jason-rl

.github/workflows/ci.yml

@@ -19,10 +19,10 @@ jobs:
     runs-on: ${{ github.repository == 'stainless-sdks/runloop-node' && 'depot-ubuntu-24.04' || 'ubuntu-latest' }}
     if: github.event_name == 'push' || github.event.pull_request.head.repo.fork
     steps:
-      - uses: actions/checkout@v4
+      - uses: runloopai/checkout@main
 
       - name: Set up Node
-        uses: actions/setup-node@v4
+        uses: runloopai/setup-node@main
         with:
           node-version: '18'
 
@@ -41,10 +41,10 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: runloopai/checkout@main
 
       - name: Set up Node
-        uses: actions/setup-node@v4
+        uses: runloopai/setup-node@main
         with:
           node-version: '18'
 
@@ -57,7 +57,7 @@ jobs:
       - name: Get GitHub OIDC Token
         if: github.repository == 'stainless-sdks/runloop-node'
         id: github-oidc
-        uses: actions/github-script@v6
+        uses: runloopai/github-script@main
         with:
           script: core.setOutput('github_token', await core.getIDToken());
 
@@ -74,10 +74,10 @@ jobs:
     runs-on: ${{ github.repository == 'stainless-sdks/runloop-node' && 'depot-ubuntu-24.04' || 'ubuntu-latest' }}
     if: github.event_name == 'push' || github.event.pull_request.head.repo.fork
     steps:
-      - uses: actions/checkout@v4
+      - uses: runloopai/checkout@main
 
       - name: Set up Node
-        uses: actions/setup-node@v4
+        uses: runloopai/setup-node@main
         with:
           node-version: '20'
 

.github/workflows/publish-docs.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: get the gh-pages repo
-        uses: actions/checkout@v3
+        uses: runloopai/checkout@main
         with:
           ref: gh-pages
 
@@ -25,7 +25,7 @@ jobs:
           tar -cvf documentation.tar ./docs
 
       - name: create a document artifact
-        uses: actions/upload-artifact@v4
+        uses: runloopai/upload-artifact@main
         with:
           name: documentation
           path: documentation.tar
@@ -35,17 +35,17 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout src
-        uses: actions/checkout@v4
+        uses: runloopai/checkout@main
 
       - run: mkdir -p ./docs
       - name: Download the existing documents artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
         with:
           name: documentation
       - run: tar -xf documentation.tar ./docs -C ./docs
 
       - name: Build
-        uses: actions/setup-node@v4
+        uses: runloopai/setup-node@main
         with:
           node-version: 22.x
           cache: 'yarn'
@@ -59,7 +59,7 @@ jobs:
         run: tar -cvf newdocumentation.tar ./docs
 
       - name: create a new document artifact
-        uses: actions/upload-artifact@v4
+        uses: runloopai/upload-artifact@main
         with:
           name: newdocumentation
           path: newdocumentation.tar
@@ -69,13 +69,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout the gh-pages repo
-        uses: actions/checkout@v3
+        uses: runloopai/checkout@main
         with:
           ref: gh-pages
 
       - run: mkdir -p ./docs
       - name: Download the new documents artifact
-        uses: actions/download-artifact@v4
+        uses: runloopai/download-artifact@main
         with:
           name: newdocumentation
       - run: tar -xf newdocumentation.tar ./docs -C ./docs

.github/workflows/publish-npm.yml

@@ -14,10 +14,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: runloopai/checkout@main
 
       - name: Set up Node
-        uses: actions/setup-node@v3
+        uses: runloopai/setup-node@main
         with:
           node-version: '20'
 

.github/workflows/release-doctor.yml

@@ -12,7 +12,7 @@ jobs:
     if: github.repository == 'runloopai/api-client-ts' && (github.event_name == 'push' || github.event_name == 'workflow_dispatch' || startsWith(github.head_ref, 'release-please') || github.head_ref == 'next')
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: runloopai/checkout@main
 
       - name: Check release environment
         run: |

.github/workflows/sdk-coverage.yml

@@ -21,10 +21,10 @@ jobs:
     timeout-minutes: 120
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: runloopai/checkout@main
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: runloopai/setup-node@main
         with:
           node-version: '20'
           cache: 'yarn'
@@ -56,7 +56,7 @@ jobs:
         run: yarn test:objects-coverage 2>&1 | tee test-output.log
 
       - name: Upload coverage report
-        uses: actions/upload-artifact@v4
+        uses: runloopai/upload-artifact@main
         if: always()
         with:
           name: coverage-report
@@ -65,7 +65,7 @@ jobs:
 
       - name: Comment results on PR
         if: always() && github.event_name == 'pull_request'
-        uses: actions/github-script@v7
+        uses: runloopai/github-script@main
         with:
           script: |
             const fs = require('fs');

.github/workflows/set-stable-tag.yml

@@ -15,10 +15,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: runloopai/checkout@main
 
       - name: Set up Node
-        uses: actions/setup-node@v3
+        uses: runloopai/setup-node@main
         with:
           node-version: '20'
 

.github/workflows/smoke-tests.yml

@@ -17,10 +17,10 @@ jobs:
     timeout-minutes: 60
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: runloopai/checkout@main
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: runloopai/setup-node@main
         with:
           node-version: '20'
           cache: 'yarn'
@@ -52,7 +52,7 @@ jobs:
 
       - name: Comment results on PR
         if: failure() && github.event_name == 'pull_request'
-        uses: actions/github-script@v7
+        uses: runloopai/github-script@main
         with:
           script: |
             const runUrl = `https://github.com/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId}`;
@@ -72,7 +72,7 @@ jobs:
 
       - name: Comment success on PR
         if: success() && github.event_name == 'pull_request'
-        uses: actions/github-script@v7
+        uses: runloopai/github-script@main
         with:
           script: |
             const comment = `## ✅ Smoke Tests Passed