(paimon-mosaic) branch release-0.3 updated: fix(ci): use approved Python release actions (#102)

[hope]

This is an automated email from the ASF dual-hosted git repository.

XiaoHongbo-Hope pushed a commit to branch release-0.3
in repository https://gitbox.apache.org/repos/asf/paimon-mosaic.git


The following commit(s) were added to refs/heads/release-0.3 by this push:
     new 0996d9f  fix(ci): use approved Python release actions (#102)
0996d9f is described below

commit 0996d9f3b79f5492ab8b155eb3df9277f99baefe
Author: jianguotian <841604...@qq.com>
AuthorDate: Wed Oct 21 17:48:51 2026 +0800

    fix(ci): use approved Python release actions (#102)
    
    Co-authored-by: mingfeng <tjg281...@antgroup.com>
---
 .github/workflows/release-python-publish.yml | 4 ++--
 .github/workflows/release-python.yml         | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release-python-publish.yml 
b/.github/workflows/release-python-publish.yml
index cd23062..0f08274 100644
--- a/.github/workflows/release-python-publish.yml
+++ b/.github/workflows/release-python-publish.yml
@@ -84,7 +84,7 @@ jobs:
         if: >-
           github.event_name != 'workflow_dispatch' &&
           contains(github.ref_name, '-rc')
-        uses: 
pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e
+        uses: 
pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
         with:
           repository-url: https://test.pypi.org/legacy/
           skip-existing: true
@@ -95,7 +95,7 @@ jobs:
         if: >-
           github.event_name != 'workflow_dispatch' &&
           !contains(github.ref_name, '-')
-        uses: 
pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e
+        uses: 
pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
         with:
           skip-existing: true
           packages-dir: dist
diff --git a/.github/workflows/release-python.yml 
b/.github/workflows/release-python.yml
index 7f4b377..edeef1b 100644
--- a/.github/workflows/release-python.yml
+++ b/.github/workflows/release-python.yml
@@ -61,7 +61,7 @@ jobs:
           python-version: "3.12"
 
       - name: Build wheels via cibuildwheel
-        uses: pypa/cibuildwheel@294735312765b09d24a2fbec22660ce817587d55
+        uses: pypa/cibuildwheel@b3395e271a35f73dad77f21802abe9b986dfe299 # 
v4.3.1
         with:
           package-dir: python
           output-dir: wheelhouse