From aa5feb3df0d3cb1785507af2d6900432944fea73 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 8 Mar 2026 11:15:35 -0500
Subject: [PATCH] CI: Pin actions/github script to 8.1.0 by hash

---
 .github/workflows/build_release.yml       | 2 +-
 .github/workflows/weekly-compare-link.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build_release.yml b/.github/workflows/build_release.yml
index 8375fba24e..cddd8ab02f 100644
--- a/.github/workflows/build_release.yml
+++ b/.github/workflows/build_release.yml
@@ -46,7 +46,7 @@ jobs:
 
       - name: Trigger notes updater workflow (only for weekly)
         if: startsWith(steps.get_tag.outputs.build_tag, 'weekly-')
-        uses: actions/github-script@v7
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd  # v8.0.0
         env:
           WEEKLY_TAG: ${{ steps.get_tag.outputs.build_tag }}
         with:
diff --git a/.github/workflows/weekly-compare-link.yml b/.github/workflows/weekly-compare-link.yml
index 8c2c606d8b..d22df63cfb 100644
--- a/.github/workflows/weekly-compare-link.yml
+++ b/.github/workflows/weekly-compare-link.yml
@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Inject compare link into weekly release notes
-        uses: actions/github-script@v7
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd  # v8.0.0
         env:
           # Pass manual inputs via env for convenience
           CURRENT_TAG: ${{ github.event.inputs.current_tag }}