From 020cd70200e8b4df03a676cd376ae13f60e47226 Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Mon, 21 Sep 2026 10:47:08 +0000
Subject: [PATCH] fix(ci): pin action-send-mail by SHA and correct its lockfile
 entry

---
 .github/workflows/actions.lock          | 2 +-
 .github/workflows/push-email-notify.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock
index f722eba2..9985bb06 100644
--- a/.github/workflows/actions.lock
+++ b/.github/workflows/actions.lock
@@ -60,7 +60,7 @@ dependencies:
         repo_id: 192625955
     'dawidd6/action-send-mail@v3.12.0':
         ref: 'v3.12.0'
-        commit: 'sha1-67ce3558d613188179559c61d3565140cf389968'
+        commit: 'sha1-2cea9617b09d79a095af21254fbcb7ae95903dde'
         owner_id: 9713907
         repo_id: 222439721
     'denoland/setup-deno@22d081ff2d3a40755e97629de92e3bcbfa7cf2ed':
diff --git a/.github/workflows/push-email-notify.yml b/.github/workflows/push-email-notify.yml
index 0a1529ce..18cb3121 100644
--- a/.github/workflows/push-email-notify.yml
+++ b/.github/workflows/push-email-notify.yml
@@ -18,7 +18,7 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: Send push notification email
-        uses: dawidd6/action-send-mail@v3.12.0
+        uses: dawidd6/action-send-mail@2cea9617b09d79a095af21254fbcb7ae95903dde # v3.12.0
         with:
           server_address: ${{ secrets.SMTP_HOST }}
           server_port: ${{ secrets.SMTP_PORT }}