From 8d0d584a340df3f6df0fbf5aebe388e3243c6b58 Mon Sep 17 00:00:00 2001
From: Anas Khan <83116240+anxkhn@users.noreply.github.com>
Date: Sat, 4 Jul 2026 17:17:19 +0530
Subject: [PATCH] [Actions] Pin actions/deploy-pages to a commit SHA.

Every other third-party action in .github/workflows is pinned to a full
commit SHA with a version comment; actions/deploy-pages in
docs-release.yml was the only one still referenced by the mutable @v5
tag. Pin it to the commit that v5 currently resolves to and keep the
readable comment, matching the existing convention (for example
actions/upload-pages-artifact in common.yml). Dependabot's
github-actions updates keep SHA-pinned refs current.
---
 .github/workflows/docs-release.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/docs-release.yml b/.github/workflows/docs-release.yml
index d62392881..a63a8eda3 100644
--- a/.github/workflows/docs-release.yml
+++ b/.github/workflows/docs-release.yml
@@ -43,4 +43,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v5
+        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5