Pin remaining GitHub actions (#1468)

Author: jakob-keller

.github/workflows/ci-cd.yml

@@ -130,7 +130,8 @@ jobs:
 
     steps:
     - name: Download distribution 📦
-      uses: actions/download-artifact@v7
+      # yamllint disable-line rule:line-length
+      uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131  # v7.0.0
       with:
         name: python-package-distributions
         path: dist/

.github/workflows/reusable-build.yml

@@ -16,7 +16,7 @@ jobs:
     timeout-minutes: 5
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
       with:
         persist-credentials: false
     - name: Install uv
@@ -31,7 +31,8 @@ jobs:
     - name: Check distribution 📦
       run: uvx twine check --strict dist/*
     - name: Upload distribution 📦
-      uses: actions/upload-artifact@v6
+      # yamllint disable-line rule:line-length
+      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f  # v6.0.0
       with:
         name: python-package-distributions
         path: dist/

.github/workflows/reusable-test.yml

@@ -44,7 +44,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
       with:
         persist-credentials: false
         submodules: true

.github/workflows/stale.yml

@@ -22,7 +22,7 @@ jobs:
     timeout-minutes: 5
 
     steps:
-    - uses: actions/stale@v10
+    - uses: actions/stale@997185467fa4f803885201cee163a9f38240193d  # v10.1.1
       with:
         stale-issue-message: >-
           This issue has been marked as stale because it has been inactive for