Release 3.2.2 (#19)

Project Root:
* Update action.py
* Update action.yml

---------
Signed-off-by: DK96-OS <69859316+DK96-OS@users.noreply.github.com>

Author: DK96-OS

action.py

@@ -69,7 +69,6 @@ def _log(msg):
 
 def _download_ref_asset(ext):
     repo = os.getenv("GITHUB_REPOSITORY")
-    ref = os.getenv("GITHUB_REF")
 
     # NOTE: Branch names often have `/` in them (e.g. `feat/some-name`),
     # which would break the artifact path we construct below.
@@ -79,7 +78,7 @@ def _download_ref_asset(ext):
     artifact = Path(f"/tmp/{ref_name_normalized}.{ext}")
 
     # GitHub supports /:org/:repo/archive/:ref<.tar.gz|.zip>.
-    r = requests.get(f"https://github.com/{repo}/archive/{ref}.{ext}", stream=True)
+    r = requests.get(f"https://github.com/{repo}/archive/main.{ext}", stream=True)
     r.raise_for_status()
     with artifact.open("wb") as io:
         for chunk in r.iter_content(chunk_size=None):
@@ -281,4 +280,4 @@ def _fatal_help(msg):
 
 # If signing didn't fail, then we check the verification status, if present.
 if verify_status is not None:
-    sys.exit(verify_status.returncode)
+    sys.exit(verify_status.returncode)

action.yml

@@ -101,13 +101,13 @@ runs:
         GHA_SIGSTORE_PYTHON_INPUTS: "${{ inputs.inputs }}"
       shell: bash
 
-    - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+    - uses: actions/upload-artifact@release/v4
       if: inputs.upload-signing-artifacts == 'true'
       with:
         name: "signing-artifacts-${{ github.job }}"
         path: "${{ env.GHA_SIGSTORE_PYTHON_INTERNAL_SIGNING_ARTIFACTS }}"
 
-    - uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # v2
+    - uses: softprops/action-gh-release@release/v2
       if: inputs.release-signing-artifacts == 'true' && github.event_name == 'release' && github.event.action == 'published'
       with:
         files: "${{ env.GHA_SIGSTORE_PYTHON_INTERNAL_SIGNING_ARTIFACTS }}"