Use full versions specs for all github actions

Author: vladistan

.github/workflows/check-dependencies.yaml

@@ -12,9 +12,9 @@ jobs:
   quality-checks:
     runs-on: ubuntu-latest
     steps:
-        uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.0
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v6.6.1
         with:
           version: ${{ env.UV_VERSION }}
           enable-cache: true
@@ -48,15 +48,15 @@ jobs:
 
     steps:
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v6.6.1
         with:
           enable-cache: true
           version: ${{ env.UV_VERSION }}
           python-version: ${{ matrix.python-version }}
 
 
       - name: Check out repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           # Fetch all history for all branches and all tags.
           # The tags are required for dynamic versioning.

.github/workflows/main.yaml

@@ -17,9 +17,9 @@ jobs:
   quality-checks:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.0
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v6.6.1
         with:
           version: ${{ env.UV_VERSION }}
           enable-cache: true
@@ -58,33 +58,33 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           fetch-depth: 0
 
       #----------------------------------------------
       #          install uv
       #----------------------------------------------
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v6.6.1
         with:
           version: ${{ env.UV_VERSION }}
           enable-cache: true
           cache-dependency-glob: "uv.lock"
           python-version: ${{ matrix.python-version }}
 
       #----------------------------------------------
-      #    install your root project, if required 
-      #----------------------------------------------      
+      #    install your root project, if required
+      #----------------------------------------------
       - name: Install dependencies
         run: |
-          uv sync --group dev 
+          uv sync --group dev
 
       - name: Verify uv.lock is up-to-date
         run: uv lock --check
 
       #----------------------------------------------
-      #              coverage report   
+      #              coverage report
       #----------------------------------------------
       - name: Generate coverage results
         # Set bash shell to fail correctly on Windows https://github.com/actions/runner-images/issues/6668
@@ -98,7 +98,7 @@ jobs:
       #           upload coverage results
       #----------------------------------------------
       - name: Upload coverage report
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v5.4.3
         with:
           name: codecov-results-${{ matrix.os }}-${{ matrix.python-version }}
           token: ${{ secrets.CODECOV_TOKEN }}

.github/workflows/pypi-publish.yaml

@@ -12,7 +12,7 @@ jobs:
     name: Build Python 🐍 distributions 📦 for publishing to PyPI
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v5.0.0
       with:
         # Checkout the code including tags required for dynamic versioning
         fetch-depth: 0
@@ -23,7 +23,7 @@ jobs:
         python-version: 3.13
 
     - name: Install uv
-      uses: astral-sh/setup-uv@v6
+      uses: astral-sh/setup-uv@v6.6.1
       with:
         enable-cache: true
         version: ${{ env.UV_VERSION }}

.github/workflows/test-upstream.yaml

@@ -82,15 +82,15 @@ jobs:
           echo "upstream_repo=${{ inputs.upstream_repo }}" >> "$GITHUB_ENV"
 
       - name: checkout upstream
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: "${{ env.upstream_repo }}"
           path: linkml
           ref: "${{ env.upstream_branch }}"
           fetch-depth: 0
 
       - name: checkout linkml-runtime
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           path: linkml-runtime
           fetch-depth: 0
@@ -110,7 +110,7 @@ jobs:
           git fetch upstream --tags
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v6.6.1
         with:
           enable-cache: true
           version: ${{ env.UV_VERSION }}