From 0fd4c5d624895bce32e5b31c88cd555b426584a0 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Sat, 30 May 2026 07:33:17 +0000
Subject: [PATCH] chore: pin README example to v0.5.2

---
 README.md | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/README.md b/README.md
index 0281b8a..6529050 100644
--- a/README.md
+++ b/README.md
@@ -52,7 +52,7 @@ jobs:
       contents: write       # push the `release/vX.Y.Z` branch and delete superseded ones
       pull-requests: write  # create a release PR, update its body, close superseded PRs
     steps:
-      - uses: danielroe/uppt/pr@e4a14cf018abc126b709938c2c2c61d62b6d859e # v0.5.1
+      - uses: danielroe/uppt/pr@3a4fd445ce266b91dd73ced7ae8140cc0f9fc19c # v0.5.2
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
 
@@ -74,7 +74,7 @@ jobs:
       contents: write       # push the `vX.Y.Z` tag and create the GitHub release
       actions: write        # `gh workflow run release.yml --ref vX.Y.Z` chained dispatch
     steps:
-      - uses: danielroe/uppt/release@e4a14cf018abc126b709938c2c2c61d62b6d859e # v0.5.1
+      - uses: danielroe/uppt/release@3a4fd445ce266b91dd73ced7ae8140cc0f9fc19c # v0.5.2
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
 
@@ -94,7 +94,7 @@ jobs:
       files: ${{ steps.pack.outputs.files }}
     steps:
       - id: pack
-        uses: danielroe/uppt/pack@e4a14cf018abc126b709938c2c2c61d62b6d859e # v0.5.1
+        uses: danielroe/uppt/pack@3a4fd445ce266b91dd73ced7ae8140cc0f9fc19c # v0.5.2
 
   # `publish` downloads the prebuilt tarball from the pack job's
   # artifact and stages it for publish.
@@ -112,7 +112,7 @@ jobs:
       id-token: write       # OIDC claim for npm trusted publisher
     environment: npm        # must match the trusted-publisher entry on npmjs.com
     steps:
-      - uses: danielroe/uppt/publish@e4a14cf018abc126b709938c2c2c61d62b6d859e # v0.5.1
+      - uses: danielroe/uppt/publish@3a4fd445ce266b91dd73ced7ae8140cc0f9fc19c # v0.5.2
         with:
           files: ${{ needs.pack.outputs.files }}
 ```
@@ -191,7 +191,7 @@ Declare the publishable workspaces by passing the same `packages:` input to both
   pr:
     # ...
     steps:
-      - uses: danielroe/uppt/pr@<sha>
+      - uses: danielroe/uppt/pr@3a4fd445ce266b91dd73ced7ae8140cc0f9fc19c # v0.5.2
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           packages: |
@@ -201,7 +201,7 @@ Declare the publishable workspaces by passing the same `packages:` input to both
   pack:
     # ...
     steps:
-      - uses: danielroe/uppt/pack@<sha>
+      - uses: danielroe/uppt/pack@3a4fd445ce266b91dd73ced7ae8140cc0f9fc19c # v0.5.2
         with:
           packages: |
             packages/*
-- 
2.51.2