From b29c0e790c0a3027710ae35630a6bfb61c357ca9 Mon Sep 17 00:00:00 2001
From: Dan Fuchs <danfuchs@slac.stanford.edu>
Date: Fri, 8 Nov 2024 15:42:43 -0600
Subject: [PATCH] DM-47489: Pin `gh-action-pypi-publish` to v1.11.0

Anything after v1.11.0 breaks invocation from composite actions:
https://github.com/pypa/gh-action-pypi-publish/issues/299
---
 action.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/action.yaml b/action.yaml
index 9b24a1f..418c697 100644
--- a/action.yaml
+++ b/action.yaml
@@ -48,6 +48,8 @@ runs:
 
     - name: Publish
       if: fromJSON(inputs.upload) == true
-      uses: pypa/gh-action-pypi-publish@release/v1
+      # Pinned because 1.12 breaks using this in a composite action:
+      # https://github.com/pypa/gh-action-pypi-publish/issues/299
+      uses: pypa/gh-action-pypi-publish@v1.11.0
       with:
         packages-dir: ${{ inputs.working-directory }}/dist