Pin versions in Github actions & add checksum check (#1869)

## Changes

Pin dependency versions in Github actions & add checksum check

## Tests

Manually

Author: misha-db

.github/workflows/create-build-artifacts.yml

@@ -22,7 +22,7 @@ jobs:
           node-version: 22
           cache: "yarn"
 
-      - run: yarn install
+      - run: yarn install --immutable
       - run: yarn run build
       - run: yarn run package:all
         working-directory: packages/databricks-vscode

.github/workflows/publish-to-openvsx.yml

@@ -46,10 +46,10 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Install vcse
-        run: npm install -g @vscode/vsce
+        run: npm install -g @vscode/vsce@3.7.1
 
       - name: Install ovsx
-        run: npm install -g ovsx
+        run: npm install -g ovsx@0.10.10
 
       - name: Publish to Open VSX
         run: |

.github/workflows/publish-to-vscode.yml

@@ -46,7 +46,7 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Install vcse
-        run: npm install -g @vscode/vsce
+        run: npm install -g @vscode/vsce@3.7.1
 
       - name: Publish to VS Code Marketplace
         run: |

.github/workflows/unit-tests.yml

@@ -70,7 +70,7 @@ jobs:
           python-version: "3.12" # 3.13+ is not yet supported by the latest DBR
 
       - name: Install Python dependencies
-        run: pip install ipython
+        run: pip install ipython==9.11.0
         working-directory: packages/databricks-vscode
 
       - name: Python Unit Tests

packages/databricks-vscode/scripts/fetch-databricks-cli.sh

@@ -16,8 +16,16 @@ fi
 CLI_DIR=$(mktemp -d -t databricks-XXXXXXXXXX)
 pushd $CLI_DIR
 curl -L -O "https://github.com/databricks/cli/releases/download/v${CLI_VERSION}/databricks_cli_${CLI_VERSION}_${CLI_ARCH}.zip"
+curl -L -O "https://github.com/databricks/cli/releases/download/v${CLI_VERSION}/databricks_cli_${CLI_VERSION}_SHA256SUMS"
+if command -v sha256sum &>/dev/null; then
+    grep "databricks_cli_${CLI_VERSION}_${CLI_ARCH}.zip" "databricks_cli_${CLI_VERSION}_SHA256SUMS" | sha256sum -c -
+else
+    echo "checking sum2"
+    grep "databricks_cli_${CLI_VERSION}_${CLI_ARCH}.zip" "databricks_cli_${CLI_VERSION}_SHA256SUMS" | shasum -a 256 -c -
+fi
 unzip databricks_*_$CLI_ARCH.zip
 rm databricks_*_$CLI_ARCH.zip
+rm databricks_*_SHA256SUMS
 ls
 
 popd