update linter runner to 24.04

update sha for all gha uses

Author: dnanexus-mares

.github/workflows/codeql.yml

@@ -40,11 +40,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@99c9897648dded3fe63d6f328c46089dd57735ca # v2.17.0
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -58,7 +58,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, Go, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+      uses: github/codeql-action/autobuild@99c9897648dded3fe63d6f328c46089dd57735ca # v2.17.0
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -71,6 +71,6 @@ jobs:
     #     ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@99c9897648dded3fe63d6f328c46089dd57735ca # v2.17.0
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/cwl_conformance.yml

@@ -27,11 +27,11 @@ jobs:
       PROJECT: dxCompiler_playground
     steps:
       - name: Git checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       # performance optimizations https://abbbi.github.io/actions/
-      - uses: abbbi/github-actions-tune@v1
+      - uses: abbbi/github-actions-tune@81fb919e588c20b7ab52b2cac097d2efd765c714 # v1
       - name: Install java
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@d202f5dbf7256730fb690ec59f6381650114feb2
         with:
           java-version: 11
       - name: Install SBT

.github/workflows/dxcint.yml

@@ -28,16 +28,20 @@ jobs:
       TEST_DIR: dxcint_testing
     steps:
       - name: Git checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       # performance optimizations https://abbbi.github.io/actions/
-      - uses: abbbi/github-actions-tune@v1
+      - uses: abbbi/github-actions-tune@81fb919e588c20b7ab52b2cac097d2efd765c714 # v1
       - name: Install java
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@d202f5dbf7256730fb690ec59f6381650114feb2 # v1.4.3
         with:
           java-version: 11
 
+      - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d  # v5.1.0
+        with:
+          python-version: '3.11'
+
       - name: Install Poetry
-        uses: snok/install-poetry@v1
+        uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a # v1.4.1
         with:
           version: 1.4.2
           virtualenvs-create: true

.github/workflows/integration.yml

@@ -27,11 +27,11 @@ jobs:
       PROJECT: dxCompiler_playground
     steps:
       - name: Git checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       # performance optimizations https://abbbi.github.io/actions/
-      - uses: abbbi/github-actions-tune@v1
+      - uses: abbbi/github-actions-tune@81fb919e588c20b7ab52b2cac097d2efd765c714 # v1
       - name: Install java
-        uses: actions/setup-java@v1
+        uses: aactions/setup-java@d202f5dbf7256730fb690ec59f6381650114feb2 # v1.4.3
         with:
           java-version: 11
       - name: Install SBT

.github/workflows/integration2.yml

@@ -27,11 +27,11 @@ jobs:
       PROJECT: dxCompiler_playground
     steps:
       - name: Git checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       # performance optimizations https://abbbi.github.io/actions/
-      - uses: abbbi/github-actions-tune@v1
+      - uses: abbbi/github-actions-tune@81fb919e588c20b7ab52b2cac097d2efd765c714 # v1
       - name: Install java
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@d202f5dbf7256730fb690ec59f6381650114feb2 # v1.4.3
         with:
           java-version: 11
       - name: Install SBT
@@ -42,7 +42,7 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y sbt
       - name: Install Poetry
-        uses: snok/install-poetry@v1
+        uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a # v1.4.1
         with:
           version: 1.4.2
           virtualenvs-create: true

.github/workflows/linters.yml

@@ -17,10 +17,12 @@ jobs:
     name: Run pre-commit Action 
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
 
-      - uses: pre-commit/action@v2.0.3
+      - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d  # v5.1.0
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          python-version: '3.11'
+
+      - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd  # v3.0.1

.github/workflows/release.yml

@@ -20,9 +20,9 @@ jobs:
       PROJECT: dxCompiler_playground
     steps:
       - name: Git checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       # performance optimizations https://abbbi.github.io/actions/
-      - uses: abbbi/github-actions-tune@v1
+      - uses: abbbi/github-actions-tune@81fb919e588c20b7ab52b2cac097d2efd765c714 # v1
       - name: Validate inputs
         run: |
           # make sure the version doesn't contain -SNAPSHOT
@@ -58,7 +58,7 @@ jobs:
             fi
           done
       - name: Install java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
         with:
           distribution: 'corretto'
           java-version: '11'
@@ -70,7 +70,7 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y sbt
       - name: Install Poetry
-        uses: snok/install-poetry@v1
+        uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a # v1.4.1
         with:
           version: 1.4.2
           virtualenvs-create: true
@@ -175,7 +175,7 @@ jobs:
           echo "release-notes-path=$(echo "${RELEASE_NOTES_PATH}")" >> $GITHUB_OUTPUT
       - name: Create release entry
         id: create-release
-        uses: actions/create-release@v1
+        uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e # v1.1.4
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
@@ -186,7 +186,7 @@ jobs:
           prerelease: false
       - name: Upload release asset
         id: upload-release-asset
-        uses: actions/upload-release-asset@v1
+        uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:

.github/workflows/scala.yml

@@ -23,11 +23,11 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Git Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       # performance optimizations https://abbbi.github.io/actions/
-      - uses: abbbi/github-actions-tune@v1
+      - uses: abbbi/github-actions-tune@81fb919e588c20b7ab52b2cac097d2efd765c714 # v1
       - name: Install Java
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@d202f5dbf7256730fb690ec59f6381650114feb2 # v1.4.3
         with:
           java-version: 11
       - name: Install SBT