From 813e59e2b4ade82ef76b33b0372feef66baf57d4 Mon Sep 17 00:00:00 2001
From: Dustin Ingram <di@users.noreply.github.com>
Date: Mon, 24 Nov 2025 15:07:07 +0000
Subject: [PATCH] Pin and bump action versions in release workflow too

---
 .github/workflows/release.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 288ad30..73b0d52 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,4 +1,4 @@
-name: Publish to PyPI 
+name: Publish to PyPI
 
 on:
   push:
@@ -13,10 +13,10 @@ jobs:
      permissions:
        id-token: write
      steps:
-       - uses: actions/checkout@v4
-       - uses: actions/setup-python@v5
+       - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+       - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
          with:
-           python-version: '3.11' 
+           python-version: '3.11'
        - name: Install pypa/build
          run: >-
            python3 -m