Pin commit hash for 3rd party actions

.github/workflows/linting.yml

@@ -14,4 +14,4 @@ jobs:
     steps:
       - uses: actions/checkout@v2
       - uses: actions/setup-python@v2
-      - uses: pre-commit/action@v2.0.0
+      - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd #v3.0.1

.github/workflows/tests.yml

@@ -28,15 +28,15 @@ jobs:
     steps:
       - uses: actions/checkout@v2
       - name: Cache conda
-        uses: actions/cache@v2
+        uses: actions/cache@v4
         env:
           # Increase this value to reset cache if ci/environment.yml has not changed
           CACHE_NUMBER: 0
         with:
           path: ~/conda_pkgs_dir
           key: ${{ runner.os }}-conda-${{ env.CACHE_NUMBER }}-${{ hashFiles('ci/environment.yml') }}
       - name: Setup miniconda
-        uses: goanpeca/setup-miniconda@v1
+        uses: goanpeca/setup-miniconda@f4c00b0ec69bdc87b1ab4972613558dd9f4f36f3 #v1
         with:
           activate-environment: pyconform # Defined in ci/environment.yml
           auto-update-conda: false
@@ -52,7 +52,7 @@ jobs:
       - name: Run Tests
         run: ci/runtests.sh
       - name: Upload code coverage to Codecov
-        uses: codecov/codecov-action@v1
+        uses: codecov/codecov-action@e3f7b8baf8199f0945b1a1a79d355e4f22c53e4f #v1
         with:
           file: ./coverage.xml
           flags: unittests