From 399e2ccf232572d2af9906f78e88f2e429b1667f Mon Sep 17 00:00:00 2001
From: Zac Cranko <zcrank@google.com>
Date: Fri, 4 Apr 2025 11:17:13 -0700
Subject: [PATCH] bump webhook action version and improve permissions

---
 .github/workflows/flax_publish.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/flax_publish.yml b/.github/workflows/flax_publish.yml
index b4f6569df..7020f2a6a 100644
--- a/.github/workflows/flax_publish.yml
+++ b/.github/workflows/flax_publish.yml
@@ -44,6 +44,9 @@ jobs:
         uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc  # v1.12.4
 
   discord_release:
+    permissions:
+      contents: read
+
     if: github.repository_owner == 'google'
     runs-on: ubuntu-latest
     steps:
@@ -63,7 +66,7 @@ jobs:
           maxLength: 2000
           truncationSymbol: "..."
       - name: Discord Webhook Action
-        uses: tsickert/discord-webhook@c840d45a03a323fbc3f7507ac7769dbd91bfb164 # v5.3.0
+        uses: tsickert/discord-webhook@b217a69502f52803de774ded2b1ab7c282e99645 # v7.0.0
         with:
           webhook-url: ${{ secrets.DISCORD_WEBHOOK_URL }}
           content: ${{ steps.get-content.outputs.string }}