From 73e27599738e4c9d32df73495feb78143c2484cf Mon Sep 17 00:00:00 2001
From: Darick Tong <d@roci.dev>
Date: Wed, 23 Sep 2026 10:04:03 -0700
Subject: [PATCH] fix: pin the Verify Signed Authors workflow to the fixed
 commit

---
 .github/workflows/signed-commit-authors.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/signed-commit-authors.yml b/.github/workflows/signed-commit-authors.yml
index 5cd141f..0e28e45 100644
--- a/.github/workflows/signed-commit-authors.yml
+++ b/.github/workflows/signed-commit-authors.yml
@@ -15,7 +15,7 @@ on:
 permissions: {}
 
 concurrency:
-  group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.event.merge_group.head_sha || github.run_id }}'
+  group: "${{ github.workflow }} @ ${{ github.event.pull_request.number || github.event.merge_group.head_sha || github.run_id }}"
   cancel-in-progress: true
 
 jobs:
@@ -31,7 +31,7 @@ jobs:
 
       - name: Verify signed commit authors
         if: github.event_name == 'pull_request'
-        uses: rocicorp/.github/.github/actions/verify-signed-commit-authors@2e203740c856d1aafcf8ea31c7923eb76e2288ed
+        uses: rocicorp/.github/.github/actions/verify-signed-commit-authors@06a0ebd29781171bf219e601f94af752cad3891a
         with:
           enforce: true
           github-token: ${{ github.token }}