This is an automated email from the ASF dual-hosted git repository.
XiaoHongbo-Hope pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/paimon-mosaic.git
The following commit(s) were added to refs/heads/main by this push:
new 1258980 ci: pin Python release actions to approved SHAs (#37)
1258980 is described below
commit 1258980028f22727370161ab8a1a5dc2216c824c
Author: QuakeWang <[email protected]>
AuthorDate: Sat May 23 17:45:40 2026 +0800
ci: pin Python release actions to approved SHAs (#37)
Signed-off-by: QuakeWang <[email protected]>
---
.github/workflows/release-python.yml | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/.github/workflows/release-python.yml
b/.github/workflows/release-python.yml
index 38de40a..0985599 100644
--- a/.github/workflows/release-python.yml
+++ b/.github/workflows/release-python.yml
@@ -66,7 +66,7 @@ jobs:
python-version: "3.12"
- name: Build wheels via cibuildwheel
- uses: pypa/[email protected]
+ uses: pypa/cibuildwheel@298ed2fb2c105540f5ed055e8a6ad78d82dd3a7e
with:
package-dir: python
output-dir: wheelhouse
@@ -199,7 +199,7 @@ jobs:
- name: Publish to TestPyPI
if: contains(github.ref, '-')
- uses: pypa/gh-action-pypi-publish@release/v1
+ uses:
pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e
with:
repository-url: https://test.pypi.org/legacy/
skip-existing: true
@@ -208,7 +208,7 @@ jobs:
- name: Publish to PyPI
if: ${{ !contains(github.ref, '-') }}
- uses: pypa/gh-action-pypi-publish@release/v1
+ uses:
pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e
with:
skip-existing: true
packages-dir: dist
