Update testing

Author: cthoyt

.github/workflows/tests.yml

@@ -28,15 +28,16 @@ jobs:
         python-version: [ "3.14", "3.11" ]
         tox-command: [ "lint", "pyroma", "mypy" ]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: "Install uv"
-        uses: "astral-sh/setup-uv@v3"
+        uses: "astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b" # v8.1.0
         with:
           enable-cache: true
           cache-dependency-glob: "pyproject.toml"
+          python-version: ${{ matrix.python-version }}
       - name: "Run command"
         run: |
-          uvx -p ${{ matrix.python-version }} --with tox-uv tox -e ${{ matrix.tox-command }}
+          uvx --with tox-uv tox -e ${{ matrix.tox-command }}
 
   docs:
     name: Documentation
@@ -50,23 +51,24 @@ jobs:
         # a year early, which prompted re-thinking about this.
         python-version: [ "3.14" ]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: "Install uv"
-        uses: "astral-sh/setup-uv@v3"
+        uses: "astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b" # v8.1.0
         with:
           enable-cache: true
           cache-dependency-glob: "pyproject.toml"
+          python-version: ${{ matrix.python-version }}
       - name: Install dependencies
         run: |
           sudo apt-get install graphviz
       - name: Lint documentation
-        run: uvx -p ${{ matrix.python-version }} --with tox-uv tox -e docs-lint
+        run: uvx --with tox-uv tox -e docs-lint
       - name: Check docstring coverage
-        run: uvx -p ${{ matrix.python-version }} --with tox-uv tox -e docstr-coverage
+        run: uvx --with tox-uv tox -e docstr-coverage
       - name: Check documentation build with Sphinx
-        run: uvx -p ${{ matrix.python-version }} --with tox-uv tox -e docs-test
+        run: uvx --with tox-uv tox -e docs-test
       - name: Lint markdown
-        run: uvx -p ${{ matrix.python-version }} --with tox-uv tox -e lint-markdown
+        run: uvx --with tox-uv tox -e lint-markdown
 
   tests:
     name: Tests
@@ -78,20 +80,21 @@ jobs:
         os: [ ubuntu-latest ]
         python-version: [ "3.14", "3.11" ]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: "Install uv"
-        uses: "astral-sh/setup-uv@v3"
+        uses: "astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b" # v8.1.0
         with:
           enable-cache: true
           cache-dependency-glob: "pyproject.toml"
+          python-version: ${{ matrix.python-version }}
       - name: Test with pytest and generate coverage file
         run:
-          uvx -p ${{ matrix.python-version }} --with tox-uv tox -e py
+          uvx --with tox-uv tox -e py
       - name: Run doctests
         run:
-          uvx -p ${{ matrix.python-version }} --with tox-uv tox -e doctests
+          uvx --with tox-uv tox -e doctests
       - name: Upload coverage report to codecov
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
         if: success()
         with:
           file: coverage.xml