[x] Now that dependabot is setup in this github repository, we can pin github actions.
[x] Workaround for the numpy requirement for pyfai. pyfai needs to be build from source because otherwise it will upgrade numpy in winpython, which will in turn breaks winpython. Fixed in https://github.com/silx-kit/pyFAI/issues/1537.