chore: prepare for a 0.0.1 release (#4)

Author: woodruffw

.github/pinact.yml

@@ -0,0 +1,6 @@
+version: 3
+
+files:
+  # NOTE: We only use pinact for the README; all actual action usage is
+  # updated via Dependabot.
+  - pattern: ../README.md

Makefile

@@ -12,6 +12,10 @@ fix:
 	uv run --dev ruff format
 	uv run --dev ruff check --fix
 
+.PHONY: pinact
+pinact:
+	pinact run --update --verify
+
 .PHONY: test
 test:
 	uv run --dev pytest -s -o log_cli=true -o log_cli_level=DEBUG test.py

README.md

@@ -68,12 +68,12 @@ jobs:
 
     needs: [build]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
 
       # NOTE: Fetches the to-be-published distributions from a previous build job.
       # Running builds in their own job is strongly encouraged for both
       # security and reproducibility.
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: dist