Pin external GitHub Actions to SHA hashes

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: jon8787

.github/workflows/build-and-publish.yaml

@@ -26,10 +26,10 @@ jobs:
         python-version: ["3.10","3.11","3.12","3.13"]
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
       with:
         python-version: ${{ matrix.python-version }}
 

.github/workflows/build-and-test.yaml

@@ -15,10 +15,10 @@ jobs:
         python-version: ["3.10","3.11","3.12","3.13"]
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
       with:
         python-version: ${{ matrix.python-version }}