update GHAs

.github/workflows/wipac-cicd.yml

@@ -8,6 +8,15 @@ on: [push]
 
 jobs:
 
+  py-versions:
+    runs-on: ubuntu-latest
+    outputs:
+      matrix: ${{ steps.versions.outputs.matrix }}
+    steps:
+      - uses: actions/checkout@v3
+      - id: versions
+        uses: WIPACrepo/[email protected]
+
   flake8:
     runs-on: ubuntu-latest
     steps:
@@ -16,11 +25,18 @@ jobs:
       - uses: WIPACrepo/[email protected]
 
   mypy:
+    needs: [py-versions]
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        py3: ${{ fromJSON(needs.py-versions.outputs.matrix) }}
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-python@v4
-      - uses: WIPACrepo/[email protected]
+        with:
+          python-version: ${{ matrix.py3 }}
+      - uses: WIPACrepo/[email protected]
 
   py-setup:
     runs-on: ubuntu-latest
@@ -42,19 +58,10 @@ jobs:
           github.ref_type == 'branch' &&
           format('refs/heads/{0}', github.event.repository.default_branch) != github.ref
         name: wipac-dev-py-setup-action (only for non-dependabot non-default branches)
-        uses: WIPACrepo/wipac-dev-py-setup-action@v1.12
+        uses: WIPACrepo/wipac-dev-py-setup-action@v2.6
         with:
           base-keywords: "WIPAC IceCube"
 
-  py-versions:
-    runs-on: ubuntu-latest
-    outputs:
-      matrix: ${{ steps.versions.outputs.matrix }}
-    steps:
-      - uses: actions/checkout@v3
-      - id: versions
-        uses: WIPACrepo/[email protected]
-
   pip-install:
     # FUTURE DEV: this can be expanded to run actual tests instead of just pip installing
     needs: [py-versions]
@@ -82,7 +89,7 @@ jobs:
     - uses: actions/checkout@v3
       with:
         fetch-depth: 0
-    - uses: python-semantic-release/python-semantic-release@master
+    - uses: python-semantic-release/python-semantic-release@v7.34.6
       with:
         github_token: ${{ secrets.GITHUB_TOKEN }}
         repository_username: __token__