From 3f0fec6d146a5e9ca17b9e73adc284ca6a5434a0 Mon Sep 17 00:00:00 2001
From: michael-siek <me@michaelsiek.com>
Date: Thu, 2 Nov 2023 20:12:33 -0400
Subject: [PATCH] ci: pin GHA to specific SHA

---
 .github/workflows/create-release.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/create-release.yml b/.github/workflows/create-release.yml
index 24bb8d8f..a3f9a32c 100644
--- a/.github/workflows/create-release.yml
+++ b/.github/workflows/create-release.yml
@@ -44,7 +44,7 @@ jobs:
           git checkout master
           git reset --hard "$commitHash"
       - name: Create pull request
-        uses: peter-evans/create-pull-request@v3
+        uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38 # tag=v5
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           branch: release