From 258f8710da789bf17b41b365a771387ee78ec667 Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Sat, 19 Sep 2026 22:29:30 +0000
Subject: [PATCH] fix(pages): pin upload-pages-artifact to v5.0.0
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

With sha_pinning_required, the older upload-pages-artifact (v3) is rejected at
job setup: its internal reference to actions/upload-artifact@v4 is a floating
tag, so GitHub refuses with 'all actions must be pinned to a full-length commit
SHA' — the job dies before running a single step.

Move to the same revision the working publishers in this estate use:
actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0.

Signed-off-by: Jonathan D.A. Jewell <6759885+hyperpolymath@users.noreply.github.com>
---
 .github/workflows/casket-pages.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/casket-pages.yml b/.github/workflows/casket-pages.yml
index 6fe365b..1597db9 100644
--- a/.github/workflows/casket-pages.yml
+++ b/.github/workflows/casket-pages.yml
@@ -127,7 +127,7 @@ jobs:
         uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
+        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
         with:
           include-hidden-files: true
           path: '_site'