From b22927e1645c97b2081514f2bc81596b4cc977c3 Mon Sep 17 00:00:00 2001
From: ReenigneArcher <42013603+ReenigneArcher@users.noreply.github.com>
Date: Fri, 28 Nov 2025 22:03:36 -0500
Subject: [PATCH] ci: Pin actions-js/push to specific commit in workflow

Updated the sync-release-assets workflow to use a specific commit hash for actions-js/push instead of the v1.5 tag, ensuring reproducibility and stability in CI.
---
 .github/workflows/sync-release-assets.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/sync-release-assets.yml b/.github/workflows/sync-release-assets.yml
index 26ca573..ebeebea 100644
--- a/.github/workflows/sync-release-assets.yml
+++ b/.github/workflows/sync-release-assets.yml
@@ -86,7 +86,7 @@ jobs:
 
       - name: Commit and push changes
         if: github.event_name != 'pull_request'
-        uses: actions-js/push@v1.5
+        uses: actions-js/push@5a7cbd780d82c0c937b5977586e641b2fd94acc5  # v1.5
         with:
           author_email: ${{ secrets.GH_BOT_EMAIL }}
           author_name: ${{ secrets.GH_BOT_NAME }}