[CI] pin all actions and tools

Author: trendels

.github/workflows/build.yml

@@ -20,18 +20,18 @@ jobs:
           - "3.13"
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@bd01e18f51369d5a26f1651c3cb451d3417e3bba  # v6.3.1
+        uses: astral-sh/setup-uv@eac588ad8def6316056a12d4907a9d4d84ff7a3b  # v7.3.0
         with:
           python-version: ${{ matrix.python-version }}
           enable-cache: true
 
       - name: Install just
-        run: uv tool install rust-just
+        run: uv tool install rust-just==1.46.0
 
       - name: Install the project
         run: uv sync --dev