From e978ccaf52f16d5504f4e722770276e3c4e2bc98 Mon Sep 17 00:00:00 2001 From: Dan Fiedler Date: Wed, 7 Oct 2026 16:46:42 -0400 Subject: [PATCH] Pin GitHub Actions to full-length commit SHAs --- .github/workflows/formatter.yml | 2 +- .github/workflows/release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/formatter.yml b/.github/workflows/formatter.yml index 86edc80d6..a26fc19b6 100644 --- a/.github/workflows/formatter.yml +++ b/.github/workflows/formatter.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: psf/black@stable + - uses: psf/black@4f1883b1f15305a0e83a7c87991f46292bf09f85 # 26.10.0 with: options: "--check --verbose --line-length 88 --force-exclude data/*" diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 55d7e5c6d..456a7e6d2 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -48,6 +48,6 @@ jobs: path: dist - name: Publish to PyPI - uses: pypa/gh-action-pypi-publish@release/v1 + uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2 with: packages-dir: dist