From 0ddd4b44f1094b1f18e4e6ac2cb8458bd0c55836 Mon Sep 17 00:00:00 2001 From: Sayo Ogunlegan Date: Thu, 30 Oct 2025 12:52:36 -0400 Subject: [PATCH] chore(ci): pin upload-release-assets action to v3.0.1 Pin AButler/upload-release-assets from @v3.0 to @v3.0.1 for explicit version control and improved security monitoring. --- .github/workflows/publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index b83130a6b..931b4624b 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -52,7 +52,7 @@ jobs: MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }} - name: Upload output files to release - uses: AButler/upload-release-assets@v3.0 + uses: AButler/upload-release-assets@v3.0.1 with: files: "target/*.jar;target/*.pom;target/*.asc" repo-token: ${{ secrets.GITHUB_TOKEN }}