Pin and update actions (#6)

Updates actions and pin as suggested by OpenSSF Scorecard, see
https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies.

Author: marbre

.github/actions/setup-build/action.yml

@@ -10,7 +10,7 @@ runs:
 
   steps:
     - name: Set up Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
       with:
         python-version: '3.11'
 

.github/workflows/buildReleaseAndPublish.yml

@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: Checkout torch-mlir
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: llvm/torch-mlir
           ref: refs/heads/main
@@ -53,14 +53,14 @@ jobs:
           cp build_tools/python_deploy/wheelhouse/torch*.whl dist/
 
       - name: Upload python wheels
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
         with:
           if-no-files-found: error
           name: snapshot-${{ matrix.package }}-${{ matrix.py_version }}-${{ env.tm_package_version }}
           path: dist
 
       - name: Release python wheels
-        uses: ncipollo/release-action@v1.14.0
+        uses: ncipollo/release-action@cdcc88a9acf3ca41c16c37bb7d21b9ad48560d87 # v.1.15.0
         with:
           artifacts: dist/*.whl
           token: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/buildReleaseAndPublishWindows.yml

@@ -33,7 +33,7 @@ jobs:
 
     steps:
       - name: Checkout torch-mlir
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: llvm/torch-mlir
           ref: refs/heads/main
@@ -43,7 +43,7 @@ jobs:
         uses: ./.github/actions/setup-build
 
       - name: "Configuring MSVC"
-        uses: ilammy/msvc-dev-cmd@v1.13.0
+        uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0
 
       - name: Build torch-mlir
         run: |
@@ -60,14 +60,14 @@ jobs:
           delvewheel repair --add-path ./build/tools/torch-mlir/python_packages/torch_mlir/torch_mlir/_mlir_libs --add-dll TorchMLIRAggregateCAPI.dll --no-dll 'c10.dll;torch_python.dll;torch_cpu.dll' -v dist/torch_mlir*.whl -w dist
 
       - name: Upload python wheels
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
         with:
           if-no-files-found: error
           name: snapshot-${{ matrix.package }}-${{ matrix.py_version }}-${{ env.tm_package_version }}
           path: dist
 
       - name: Release python wheels
-        uses: ncipollo/release-action@v1.14.0
+        uses: ncipollo/release-action@cdcc88a9acf3ca41c16c37bb7d21b9ad48560d87 # v1.15.0
         with:
           artifacts: dist/*.whl
           token: "${{ secrets.GITHUB_TOKEN }}"