From 031e2e3bc81cfc2938dc2bc0dd706b21dbda4043 Mon Sep 17 00:00:00 2001
From: Zac Bowling <zac@zacbowling.com>
Date: Mon, 17 Mar 2025 09:29:51 -0700
Subject: [PATCH 1/2] Pin github action SHAs

---
 .DS_Store                         | Bin 0 -> 8196 bytes
 .github/workflows/check_tests.yml |   4 ++--
 .github/workflows/lint.yml        |  10 +++++-----
 .github/workflows/release.yml     |   8 ++++----
 4 files changed, 11 insertions(+), 11 deletions(-)
 create mode 100644 .DS_Store

diff --git a/.DS_Store b/.DS_Store
new file mode 100644
index 0000000000000000000000000000000000000000..3dfaa3cc54304188b5b9b4c2c561d7fc7190bdf8
GIT binary patch
literal 8196
zcmeHMJ#Q015S_&~v1AEF6ex5j5)>o?QYs{>b7TY+ij<Nf;16ts9h-bfskj0pY6K-e
zfsc-kk`_^=0f~YhL?mk7?yP+~_dz;@VAk4wmz|k=&+mM<+6xhxwY}~t(E<_G(Jjt5
zFcdT!w>{TR_?ac3K|Kxos~es1Xp+m+33WgnPzTfjbwC~XTO7ceZCkx$-RG!|>VP`%
zUpio)4-vY>*ki)z9vv9m764eqv}-t?w+Fz;W9%_uL<G%nDUeHz-(nap$9&}TVvh+U
zmy_|E5967Q-=P@Cj`K$@olMNAqdK4t<Q=ek_bOecKHZ~Tv45|9SPo;OajVrHj@y{4
zU%GnZ=<W6QO&Rb0Ha-~y?*>kPK`G5md1*j<)E4Yid6drxH5_(cy=z`^8Zze@jZ-D%
zSwas#Y#PwB4JCK+*`yBLK_5_0>M}o|t0Xhj_wd5U;qr>pSDKybJU(0MjUj?gLhr6q
zyhZn=%DIc#c&P2x!Oyc1YZK=Poh!?cI@Ya@8g%SakG5!Es`&OqMneq`UL1a1WDP-m
zsGvAQ@SE?Jzk#c@NfSCqubG{ZT5MujW~giN%*v^y>2)hSZ>aJ3Y@yeQ!2Q<6-L{jt
z-{`ZA&SIga^{3CC-(*ceJpJ_)#U-!vsRGVz>Ih%Vn?6{5B;<Vjsrm98bIzhEV?HYQ
zcyX@b*V(h*lXe6ryAVV}-lOxcr}wqUNV$tM1V0!eX3_PZeb7-I$U0Eri3Pj=zgGVK
zKU=1Ms{`u5KjeU^wl-R8_(Fbfo%?EbIgik9quXZl5=K{o!L9f}w;c!0{$YsY2&uLv
V_LwkY22EcCI2&|O2mYu7zW_Qu9-IIG

literal 0
HcmV?d00001

diff --git a/.github/workflows/check_tests.yml b/.github/workflows/check_tests.yml
index 4152a05..7ba7244 100644
--- a/.github/workflows/check_tests.yml
+++ b/.github/workflows/check_tests.yml
@@ -4,9 +4,9 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: '3.x'  # Specify the Python version you want to use
           cache: pip
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index c63feb9..19461fd 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -4,10 +4,10 @@ jobs:
   ruff:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      # Run ruff linter:
-      - uses: chartboost/ruff-action@v1
-      # Run ruff linter for formatting:
-      - uses: chartboost/ruff-action@v1
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      # v4
+      - uses: chartboost/ruff-action@e18ae971ccee1b2d7bbef113930f00c670b78da4
+      # v1
+      - uses: chartboost/ruff-action@e18ae971ccee1b2d7bbef113930f00c670b78da4 # v1
         with:
           args: 'format --check'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a60afab..6da74b2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,15 +15,15 @@ jobs:
     
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Set up Python 3.9
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5
         with:
           python-version: "3.9"
 
       - name: Setup pdm
-        uses: pdm-project/setup-pdm@v3
+        uses: pdm-project/setup-pdm@ddc33ca746b5716353581f988b29464200212702 # v3
         with:
           python-version: "3.9"
           cache: true
@@ -32,4 +32,4 @@ jobs:
         run: pdm build
       
       - name: Publish package distributions to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
\ No newline at end of file
+        uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # release/v1
\ No newline at end of file

From 2da6bdf74f33de43cfab3b149d6af28e303c4b77 Mon Sep 17 00:00:00 2001
From: Zac Bowling <zac@zacbowling.com>
Date: Mon, 17 Mar 2025 09:32:28 -0700
Subject: [PATCH 2/2] fix format

---
 .DS_Store                  | Bin 8196 -> 0 bytes
 .github/workflows/lint.yml |  10 ++++++----
 .gitignore                 |   4 +++-
 3 files changed, 9 insertions(+), 5 deletions(-)
 delete mode 100644 .DS_Store

diff --git a/.DS_Store b/.DS_Store
deleted file mode 100644
index 3dfaa3cc54304188b5b9b4c2c561d7fc7190bdf8..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 8196
zcmeHMJ#Q015S_&~v1AEF6ex5j5)>o?QYs{>b7TY+ij<Nf;16ts9h-bfskj0pY6K-e
zfsc-kk`_^=0f~YhL?mk7?yP+~_dz;@VAk4wmz|k=&+mM<+6xhxwY}~t(E<_G(Jjt5
zFcdT!w>{TR_?ac3K|Kxos~es1Xp+m+33WgnPzTfjbwC~XTO7ceZCkx$-RG!|>VP`%
zUpio)4-vY>*ki)z9vv9m764eqv}-t?w+Fz;W9%_uL<G%nDUeHz-(nap$9&}TVvh+U
zmy_|E5967Q-=P@Cj`K$@olMNAqdK4t<Q=ek_bOecKHZ~Tv45|9SPo;OajVrHj@y{4
zU%GnZ=<W6QO&Rb0Ha-~y?*>kPK`G5md1*j<)E4Yid6drxH5_(cy=z`^8Zze@jZ-D%
zSwas#Y#PwB4JCK+*`yBLK_5_0>M}o|t0Xhj_wd5U;qr>pSDKybJU(0MjUj?gLhr6q
zyhZn=%DIc#c&P2x!Oyc1YZK=Poh!?cI@Ya@8g%SakG5!Es`&OqMneq`UL1a1WDP-m
zsGvAQ@SE?Jzk#c@NfSCqubG{ZT5MujW~giN%*v^y>2)hSZ>aJ3Y@yeQ!2Q<6-L{jt
z-{`ZA&SIga^{3CC-(*ceJpJ_)#U-!vsRGVz>Ih%Vn?6{5B;<Vjsrm98bIzhEV?HYQ
zcyX@b*V(h*lXe6ryAVV}-lOxcr}wqUNV$tM1V0!eX3_PZeb7-I$U0Eri3Pj=zgGVK
zKU=1Ms{`u5KjeU^wl-R8_(Fbfo%?EbIgik9quXZl5=K{o!L9f}w;c!0{$YsY2&uLv
V_LwkY22EcCI2&|O2mYu7zW_Qu9-IIG

diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 19461fd..dd882e9 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -4,10 +4,12 @@ jobs:
   ruff:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
-      # v4
-      - uses: chartboost/ruff-action@e18ae971ccee1b2d7bbef113930f00c670b78da4
-      # v1
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      
+      # Run ruff linter
+      - uses: chartboost/ruff-action@e18ae971ccee1b2d7bbef113930f00c670b78da4 # v1
+      
+      # Run ruff format
       - uses: chartboost/ruff-action@e18ae971ccee1b2d7bbef113930f00c670b78da4 # v1
         with:
           args: 'format --check'
diff --git a/.gitignore b/.gitignore
index ead052a..5a652a9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -84,4 +84,6 @@ venv.bak/
 pixi.lock
 
 .stack-pr.cfg
-.vscode
\ No newline at end of file
+.vscode
+
+.DS_Store