full CI uses the latest version for each action used; pins the depend…

…ency version with its hash

Signed-off-by: Christian Biasuzzi <[email protected]>

.github/workflows/dev-ci.yml

@@ -60,6 +60,3 @@ jobs:
           pip3 uninstall -y pypowsybl_jupyter
           python -m pip install --upgrade -v -e ".[dev]"
           npm run lint
-
-
-      

.github/workflows/full-ci.yml

@@ -3,9 +3,9 @@ name: Full CI
 on:
   push:
     branches:
-      - 'main'
+      - 'vl_explorer_github_wf_experiments'
     tags:
-      - 'v*.*.*'    
+      - 'v[0-9]+.[0-9]+.[0-9]+*'
 
 jobs:
   build:
@@ -14,21 +14,21 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
 
       - name: Install node
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
         with:
           node-version: "18.x"
 
       - name: Install Python
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
         with:
           python-version: "3.12"
           architecture: "x64"
 
       - name: Setup pip cache
-        uses: actions/cache@v2
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
         with:
           path: ~/.cache/pip
           key: pip-3.12-${{ hashFiles('package.json') }}
@@ -40,7 +40,7 @@ jobs:
         id: npm-cache
         run: |
           echo "::set-output name=dir::$(npm config get cache)"
-      - uses: actions/cache@v2
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
         with:
           path: ${{ steps.npm-cache.outputs.dir }}
           key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
@@ -62,7 +62,7 @@ jobs:
           npm run lint
 
       - name: Upload wheel
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
         with:
           name: pypowsybl_jupyter-wheel
           path: dist/*.whl
@@ -74,7 +74,7 @@ jobs:
 
     steps:
       - name: Download wheels
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
         with:
           path: download
 
@@ -83,4 +83,5 @@ jobs:
         shell: bash
         run: |
           python -m pip install --user --upgrade twine
-          python -m twine upload --username __token__ --password ${{ secrets.PYPI_TOKEN }} download/*/*.whl
+          python -m twine upload --username __token__ --password INVALIDPWDFORTEST download/*/*.whl
+