Update action versions before merging PR

Author: dalito

.github/workflows/check-dependencies.yaml

@@ -31,14 +31,14 @@ jobs:
           pipx inject poetry poetry-dynamic-versioning
 
       - name: Check out repository
-        uses: actions/checkout@v4.2
+        uses: actions/checkout@v4.2.2
         with:
           # Fetch all history for all branches and all tags.
           # The tags are required for dynamic versioning.
           fetch-depth: 0  
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5.5
+        uses: actions/setup-python@v5.6.0
         with:
           python-version: ${{ matrix.python-version }}
           cache: 'poetry'

.github/workflows/main.yaml

@@ -43,12 +43,12 @@ jobs:
       #       check-out repo and set-up python
       #----------------------------------------------
       - name: Check out repository
-        uses: actions/checkout@v4.2
+        uses: actions/checkout@v4.2.2
         with:
           fetch-depth: 0
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5.5
+        uses: actions/setup-python@v5.6.0
         with:
           python-version: ${{ matrix.python-version }}
           cache: 'poetry'

.github/workflows/pypi-publish.yaml

@@ -11,13 +11,13 @@ jobs:
     name: Build Python 🐍 distributions 📦 for publishing to PyPI
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4.2
+    - uses: actions/checkout@v4.2.2
       with:
         # Checkout the code including tags required for dynamic versioning
         fetch-depth: 0
 
     - name: Set up Python
-      uses: actions/setup-python@v5.5
+      uses: actions/setup-python@v5.6.0
       with:
         python-version: 3.13
 
@@ -31,7 +31,7 @@ jobs:
         poetry build
 
     - name: Store built distribution
-      uses: actions/upload-artifact@v4.6
+      uses: actions/upload-artifact@v4.6.2
       with:
         name: distribution-files
         path: dist/
@@ -48,7 +48,7 @@ jobs:
     #   id-token: write  # this permission is mandatory for trusted publishing
     steps:
       - name: Download built distribution
-        uses: actions/download-artifact@v4.2
+        uses: actions/download-artifact@v4.3.0
         with:
           name: distribution-files
           path: dist

.github/workflows/test-upstream.yaml

@@ -84,15 +84,15 @@ jobs:
           echo "upstream_repo=${{ inputs.upstream_repo }}" >> "$GITHUB_ENV"
 
       - name: checkout upstream
-        uses: actions/checkout@v4.2
+        uses: actions/checkout@v4.2.2
         with:
           repository: "${{ env.upstream_repo }}"
           path: linkml
           ref: "${{ env.upstream_branch }}"
           fetch-depth: 0
 
       - name: checkout linkml-runtime
-        uses: actions/checkout@v4.2
+        uses: actions/checkout@v4.2.2
         with:
           path: linkml-runtime
           fetch-depth: 0
@@ -112,7 +112,7 @@ jobs:
           git fetch upstream --tags
 
       - name: set up python
-        uses: actions/setup-python@v5.5
+        uses: actions/setup-python@v5.6.0
         with:
           python-version: ${{ matrix.python-version }}