Pin dependencies (#20)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.github/workflows/create-release.yml

@@ -14,7 +14,7 @@ jobs:
  steps:
  - name: Check if organization member
  id: is_organization_member
- uses: JamesSingleton/[email protected]
+ uses: JamesSingleton/is-organization-member@fb5924a6287762ee5fc71bf9e95a60842af5528d # 1.0.1
  with:
  organization: Giskard-AI
  username: ${{ github.actor }}
@@ -28,22 +28,22 @@ jobs:
  exit 1
 
  - name: Checkout code
- uses: actions/checkout@v4.1.0
+ uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
  with:
  fetch-tags: true
  ref: main
  token: ${{ secrets.RELEASE_PAT_TOKEN }} # Needed to trigger other actions
 
  - name: Set up python
  id: setup-python
- uses: actions/setup-python@v5
+ uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5
  with:
  python-version: "3.10"
  #----------------------------------------------
  # ----- install & configure poetry -----
  #----------------------------------------------
  - name: Install Poetry
- uses: snok/install-poetry@v1
+ uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a # v1
  with:
  virtualenvs-create: true
  virtualenvs-in-project: true
@@ -74,7 +74,7 @@ jobs:
 
  - name: Create Github Release
  id: github-release
- uses: softprops/action-gh-release@v2
+ uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # v2
  with:
  tag_name: v${{ inputs.version }}
  fail_on_unmatched_files: true

.github/workflows/update-docs.yml

@@ -12,7 +12,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Checkout code
- uses: actions/checkout@v4.1.0
+ uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
  with:
  ref: docs
  fetch-tags: true
@@ -30,14 +30,14 @@ jobs:
 
  - name: Set up python
  id: setup-python
- uses: actions/setup-python@v5
+ uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5
  with:
  python-version: "3.10"
  #----------------------------------------------
  # ----- install & configure poetry -----
  #----------------------------------------------
  - name: Install Poetry
- uses: snok/install-poetry@v1
+ uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a # v1
  with:
  virtualenvs-create: true
  virtualenvs-in-project: true