From 6038fc10eb37063766bf0a147acb97dfc15915e2 Mon Sep 17 00:00:00 2001
From: Cadair <1391051+Cadair@users.noreply.github.com>
Date: Fri, 7 Aug 2026 01:27:16 +0000
Subject: [PATCH] [create-pull-request] automated change

---
 .../.github/workflows/ci.yml                     | 16 ++++++++--------
 .../.github/workflows/label_sync.yml             |  2 +-
 .../.github/workflows/sub_package_update.yml     |  8 ++++----
 3 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/{{ cookiecutter.package_name }}/.github/workflows/ci.yml b/{{ cookiecutter.package_name }}/.github/workflows/ci.yml
index 053d7497..a6ea989b 100644
--- a/{{ cookiecutter.package_name }}/.github/workflows/ci.yml	
+++ b/{{ cookiecutter.package_name }}/.github/workflows/ci.yml	
@@ -31,7 +31,7 @@ permissions: {}
 
 jobs:
   core:
-    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@v3  # zizmor: ignore[unpinned-uses]
+    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@8c8bb6c6c962542921f993d47d26df38dccd50b1  # v3.0.2
     with:
       submodules: false
       coverage: codecov
@@ -44,10 +44,10 @@ jobs:
   sdist_verify:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7  # zizmor: ignore[unpinned-uses]
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-python@v6  # zizmor: ignore[unpinned-uses]
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6.3.0
         with:
           python-version: '{{ default_python }}'
       - run: python -m pip install -U --user build
@@ -57,7 +57,7 @@ jobs:
 
   test:
     needs: [core, sdist_verify]
-    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@v3  # zizmor: ignore[unpinned-uses]
+    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@8c8bb6c6c962542921f993d47d26df38dccd50b1  # v3.0.2
     with:
       submodules: false
       coverage: codecov
@@ -74,7 +74,7 @@ jobs:
 
   docs:
     needs: [core]
-    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@v3  # zizmor: ignore[unpinned-uses]
+    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@8c8bb6c6c962542921f993d47d26df38dccd50b1  # v3.0.2
     with:
       default_python: '{{ default_python }}'
       submodules: false
@@ -97,7 +97,7 @@ jobs:
       )
     needs: [test, docs]
 {%- if cookiecutter.use_compiled_extensions == 'y' %}
-    uses: OpenAstronomy/github-actions-workflows/.github/workflows/publish.yml@v3  # zizmor: ignore[unpinned-uses]
+    uses: OpenAstronomy/github-actions-workflows/.github/workflows/publish.yml@8c8bb6c6c962542921f993d47d26df38dccd50b1  # v3.0.2
     with:
       sdist: true
       targets: |
@@ -106,7 +106,7 @@ jobs:
         - cp3{12,13,14}-macosx_arm64
         - cp3{12,13,14}-win_amd64
 {%- else %}
-    uses: OpenAstronomy/github-actions-workflows/.github/workflows/publish_pure_python.yml@v3  # zizmor: ignore[unpinned-uses]
+    uses: OpenAstronomy/github-actions-workflows/.github/workflows/publish_pure_python.yml@8c8bb6c6c962542921f993d47d26df38dccd50b1  # v3.0.2
     with:
       python-version: '{{ default_python }}'
 {%- endif %}
@@ -127,7 +127,7 @@ jobs:
       name: pypi
     steps:
       - name: Download artifacts
-        uses: actions/download-artifact@v8  # zizmor: ignore[unpinned-uses]
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           merge-multiple: true
           pattern: dist-*
diff --git a/{{ cookiecutter.package_name }}/.github/workflows/label_sync.yml b/{{ cookiecutter.package_name }}/.github/workflows/label_sync.yml
index 7f217758..cc1d5fbd 100644
--- a/{{ cookiecutter.package_name }}/.github/workflows/label_sync.yml	
+++ b/{{ cookiecutter.package_name }}/.github/workflows/label_sync.yml	
@@ -18,6 +18,6 @@ jobs:
     runs-on: ubuntu-latest
     name: Label Sync
     steps:
-      - uses: srealmoreno/label-sync-action@850ba5cef2b25e56c6c420c4feed0319294682fd
+      - uses: srealmoreno/label-sync-action@850ba5cef2b25e56c6c420c4feed0319294682fd  # v2.0.0
         with:
           config-file: https://raw.githubusercontent.com/sunpy/.github/main/labels.yml
diff --git a/{{ cookiecutter.package_name }}/.github/workflows/sub_package_update.yml b/{{ cookiecutter.package_name }}/.github/workflows/sub_package_update.yml
index 95279f44..6d95a13a 100644
--- a/{{ cookiecutter.package_name }}/.github/workflows/sub_package_update.yml	
+++ b/{{ cookiecutter.package_name }}/.github/workflows/sub_package_update.yml	
@@ -22,11 +22,11 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - uses: actions/checkout@v7  # zizmor: ignore[unpinned-uses]
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
 
-      - uses: actions/setup-python@v6  # zizmor: ignore[unpinned-uses]
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6.3.0
         with:
           python-version: "3.14"
 
@@ -79,7 +79,7 @@ jobs:
 
       - name: Create pull request
         if: steps.cruft_json.outputs.has_changes == '1'
-        uses: peter-evans/create-pull-request@v8  # zizmor: ignore[unpinned-uses]
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           add-paths: "."
@@ -104,7 +104,7 @@ jobs:
       issues: write
     steps:
       - name: Open an issue if workflow fails
-        uses: actions/github-script@v9  # zizmor: ignore[unpinned-uses]
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3  # v9.0.0
         with:
           github-token: ${{ github.token }}
           # This script is adapted from https://github.com/scientific-python/issue-from-pytest-log-action