chore: pin GitHub Actions to immutable commit SHAs

.github/actions.lock.yaml

@@ -1,21 +1,21 @@
 version: 1
-generated_at: 2026-06-11T15:38:12Z
+generated_at: 2026-06-15T13:14:55Z
 internal: []
 trusted:
   - action: actions/checkout
     refs:
-      - v2
+      - ee0669bd1cc54295c223e0bb666b733df41de1c5
     occurrences:
-      v2:
+      ee0669bd1cc54295c223e0bb666b733df41de1c5:
         .github/workflows/docker-build.yml:
           - jobs.build.steps.[0].uses
         .github/workflows/python-package.yml:
           - jobs.build.steps.[0].uses
   - action: actions/setup-python
     refs:
-      - v4.0.0
+      - d09bd5e6005b175076f227b13d9730d56e9dcfcb
     occurrences:
-      v4.0.0:
+      d09bd5e6005b175076f227b13d9730d56e9dcfcb:
         .github/workflows/python-package.yml:
           - jobs.build.steps.[1].uses
 external:

.github/workflows/docker-build.yml

@@ -15,7 +15,7 @@ jobs:
 
     steps:
     - name: checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
 
     - name: build and push docker image
       uses: mr-smithers-excellent/docker-build-push@0e68818ea37ba7728f417f03a58e06e68d9d2592 # v5

.github/workflows/python-package.yml

@@ -22,9 +22,9 @@ jobs:
         python-version: [3.7, 3.8, 3.9, "3.10"]
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v4.0.0
+      uses: actions/setup-python@d09bd5e6005b175076f227b13d9730d56e9dcfcb # v4.0.0
       with:
         python-version: ${{ matrix.python-version }}