From 44f58f51b8179aeadab313634d2b1aa7171427e6 Mon Sep 17 00:00:00 2001
From: Benjamin Michaelis <git@relay.benjamin.michaelis.net>
Date: Wed, 13 May 2026 00:03:37 -0700
Subject: [PATCH 1/2] fix: update action versions in deploy workflow
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- actions/checkout@v6 → @v4
- actions/setup-dotnet@v5 → @v4
- actions/upload-artifact@v7 → @v4
- actions/download-artifact@v8 → @v4
- softprops/action-gh-release@v3 → pin to SHA (v2)
---
 .github/workflows/deploy.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 2819146..66ce3e1 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -15,9 +15,9 @@ jobs:
   build-and-test:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v4
     - name: Setup .NET
-      uses: actions/setup-dotnet@v5
+      uses: actions/setup-dotnet@v4
       with:
         global-json-file: global.json
     - name: Restore dependencies
@@ -43,7 +43,7 @@ jobs:
       run: dotnet pack -p:PackageVersion=${{ env.nugetVersion }} --configuration Release -o ${{env.DOTNET_ROOT}}/IntelliTect.MultitoolPack --no-build 
     - name: Upload Artifacts
       if: startsWith(github.ref, 'refs/tags/v')
-      uses: actions/upload-artifact@v7
+      uses: actions/upload-artifact@v4
       with:
         name: NuGet
         path: ${{env.DOTNET_ROOT}}/IntelliTect.MultitoolPack
@@ -60,7 +60,7 @@ jobs:
       contents: write     # Required for softprops/action-gh-release
     steps:
       - name: Download artifact from build job
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v4
         with:
           name: NuGet
       - name: Get tag version
@@ -76,7 +76,7 @@ jobs:
       - name: Push NuGet
         run: dotnet nuget push IntelliTect.Multitool.${{ steps.tag-version.outputs.TAG_VERSION }}.nupkg --source https://api.nuget.org/v3/index.json --api-key ${{ steps.login.outputs.NUGET_API_KEY }} --skip-duplicate
       - name: Upload nupkg to Releases
-        uses: softprops/action-gh-release@v3
+        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2
         with:
           fail_on_unmatched_files: true
           generate_release_notes: true

From b7fa80e89f8089e6d806c38598355a898b2df973 Mon Sep 17 00:00:00 2001
From: Benjamin Michaelis <git@relay.benjamin.michaelis.net>
Date: Wed, 13 May 2026 00:07:05 -0700
Subject: [PATCH 2/2] fix: pin softprops/action-gh-release to SHA (v3)

---
 .github/workflows/deploy.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 66ce3e1..886bf86 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -15,9 +15,9 @@ jobs:
   build-and-test:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - name: Setup .NET
-      uses: actions/setup-dotnet@v4
+      uses: actions/setup-dotnet@v5
       with:
         global-json-file: global.json
     - name: Restore dependencies
@@ -43,7 +43,7 @@ jobs:
       run: dotnet pack -p:PackageVersion=${{ env.nugetVersion }} --configuration Release -o ${{env.DOTNET_ROOT}}/IntelliTect.MultitoolPack --no-build 
     - name: Upload Artifacts
       if: startsWith(github.ref, 'refs/tags/v')
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: NuGet
         path: ${{env.DOTNET_ROOT}}/IntelliTect.MultitoolPack
@@ -60,7 +60,7 @@ jobs:
       contents: write     # Required for softprops/action-gh-release
     steps:
       - name: Download artifact from build job
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: NuGet
       - name: Get tag version
@@ -76,7 +76,7 @@ jobs:
       - name: Push NuGet
         run: dotnet nuget push IntelliTect.Multitool.${{ steps.tag-version.outputs.TAG_VERSION }}.nupkg --source https://api.nuget.org/v3/index.json --api-key ${{ steps.login.outputs.NUGET_API_KEY }} --skip-duplicate
       - name: Upload nupkg to Releases
-        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2
+        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3
         with:
           fail_on_unmatched_files: true
           generate_release_notes: true