From 0d141e25bcf590675cf7c67d575196bbe80be1d3 Mon Sep 17 00:00:00 2001
From: HD Moore <x@hdm.io>
Date: Mon, 1 Apr 2024 00:39:45 -0500
Subject: [PATCH] bump actions

---
 .github/workflows/check_pr.yml |  1 +
 .github/workflows/publish.yml  | 11 +++++++----
 2 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/check_pr.yml b/.github/workflows/check_pr.yml
index 3f341ee..f268a52 100644
--- a/.github/workflows/check_pr.yml
+++ b/.github/workflows/check_pr.yml
@@ -5,6 +5,7 @@ concurrency:
   cancel-in-progress: false
 
 on:
+  workflow_dispatch:
   pull_request:
     paths:
       - '.github/**'
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 875b36f..93a32c6 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -1,13 +1,16 @@
 name: Publish SDK and Docs
 
+permissions:
+  contents: read
+
 # Allow only one concurrent deployment, skipping runs queued between the run in-progress and latest queued.
 # However, do NOT cancel in-progress runs as we want to allow these production deployments to complete.
 concurrency:
   group: "publish"
   cancel-in-progress: false
 
-
 on:
+  workflow_dispatch:
   release:
     types: [published]
 
@@ -61,8 +64,8 @@ jobs:
       name: publish-package
     runs-on: ubuntu-latest
     permissions:
-      # for OpenID Connect trusted publisher to pypi
-      id-token: write
+      contents: read
+      id-token: write      # for OpenID Connect trusted publisher to pypi
     steps:
     - uses: actions/checkout@v4
     - run: pipx install poetry
@@ -78,7 +81,7 @@ jobs:
         rm -rf dist;
         poetry build --no-cache --no-interaction
     - name: Publish package distributions to PyPI
-      uses: pypa/gh-action-pypi-publish@a56da0b891b3dc519c7ee3284aff1fad93cc8598 #v1.8.6
+      uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450 #1.18.14
   publish-docs:
     needs:
       - publish-release