From e0ca11cf80775e045529d4a1519cc766fceef548 Mon Sep 17 00:00:00 2001 From: Charlotte Wilson Date: Sun, 4 Jan 2026 18:25:49 -0500 Subject: [PATCH 1/2] [ci] Pin upload-artifact action to specific version instead of HEAD --- .github/workflows/python.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml index bb5618e8d2..e43ca1e5f6 100644 --- a/.github/workflows/python.yml +++ b/.github/workflows/python.yml @@ -50,7 +50,7 @@ jobs: mypy --show-column-numbers --config-file photon-lib/py/pyproject.toml photon-lib - name: Upload artifacts - uses: actions/upload-artifact@master + uses: actions/upload-artifact@v5 with: name: dist path: ./photon-lib/py/dist/ From ecdedcee6a3537655c58c6e192fe372f72d6dfca Mon Sep 17 00:00:00 2001 From: Charlotte Wilson Date: Sun, 4 Jan 2026 18:38:58 -0500 Subject: [PATCH 2/2] pin to full SHA --- .github/workflows/python.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml index e43ca1e5f6..c5b58a4c66 100644 --- a/.github/workflows/python.yml +++ b/.github/workflows/python.yml @@ -50,7 +50,7 @@ jobs: mypy --show-column-numbers --config-file photon-lib/py/pyproject.toml photon-lib - name: Upload artifacts - uses: actions/upload-artifact@v5 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 with: name: dist path: ./photon-lib/py/dist/