* [FR] Tie github actions to specific commit hashes Fixes #3530 * udpate action versions
* update requirements * automate everything