From dc3a82a575e2f897d4750fefcbf9050df3f718ca Mon Sep 17 00:00:00 2001 From: Ray Walker Date: Sat, 28 Mar 2026 20:12:19 +1100 Subject: [PATCH] ci: pin pypa/gh-action-pypi-publish to full commit SHA Org policy requires all actions pinned to full-length SHAs. Missed during the original SHA-pinning pass in 09dc062. --- .github/workflows/release-please.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index afbe88a..0b2f284 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -152,4 +152,4 @@ jobs: path: dist - name: Publish to PyPI (Trusted Publishing) - uses: pypa/gh-action-pypi-publish@release/v1 + uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # release/v1