From f4b3e870b9aa886fd9b9a95fc9f345076dc8199a Mon Sep 17 00:00:00 2001
From: dagecko <cnyhuis@vigilantnow.com>
Date: Mon, 30 Mar 2026 00:06:04 -0400
Subject: [PATCH] fix: pin 1 unpinned action

---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 073c4458c..8a0696c04 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -158,7 +158,7 @@ jobs:
       if: ${{ matrix.python-impl == 'cpython' && matrix.python-version != '2.6' && matrix.python-version != '2.7' && matrix.python-version != env.next }}
       # wrap broken actions/setup-python@v4
       # NB may run apt-get install in Linux
-      uses: ytdl-org/setup-python@v1
+      uses: ytdl-org/setup-python@721f2cd130736a528673de59e74be6fb0d0a8784 # v1
       env:
         # Temporary (?) workaround for Python 3.5 failures - May 2024
         PIP_TRUSTED_HOST: "pypi.python.org pypi.org files.pythonhosted.org"