From 279b58b66e5b825a0409e0fd6c38a539913be0af Mon Sep 17 00:00:00 2001
From: Kevin Liu <kevin.jq.liu@gmail.com>
Date: Sat, 28 Mar 2026 10:16:06 -0700
Subject: [PATCH 1/2] pin to hash

---
 actions.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/actions.yml b/actions.yml
index 8b1954dd..d1ad1a63 100644
--- a/actions.yml
+++ b/actions.yml
@@ -675,8 +675,9 @@ pypa/gh-action-pip-audit:
     tag: v1.1.0
     expires_at: 2026-03-31
 pypa/gh-action-pypi-publish:
-  release/v1*:
+  'ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e':
     keep: true
+    tag: v1.13.0
 pyTooling/Actions:
   '*':
     keep: true

From 6384877d9d53e33b5726c80774a9a7bba1a86ff5 Mon Sep 17 00:00:00 2001
From: Kevin Liu <kevinjqliu@users.noreply.github.com>
Date: Sun, 29 Mar 2026 13:57:53 -0700
Subject: [PATCH 2/2] Update actions.yml

Signed-off-by: Kevin Liu <kevinjqliu@users.noreply.github.com>
---
 actions.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/actions.yml b/actions.yml
index d1ad1a63..b8d65bd1 100644
--- a/actions.yml
+++ b/actions.yml
@@ -675,7 +675,7 @@ pypa/gh-action-pip-audit:
     tag: v1.1.0
     expires_at: 2026-03-31
 pypa/gh-action-pypi-publish:
-  'ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e':
+  ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e:
     keep: true
     tag: v1.13.0
 pyTooling/Actions: