From 010fa4382fcdf33a6aae6e22d1f9ff8f44dccb40 Mon Sep 17 00:00:00 2001
From: Paul Breiding <pbrdng@gmail.com>
Date: Mon, 4 May 2026 12:02:19 +0200
Subject: [PATCH] Update TagBot.yml

---
 .github/workflows/TagBot.yml | 17 ++++++++++-------
 1 file changed, 10 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/TagBot.yml b/.github/workflows/TagBot.yml
index 0ffabd9..b55094d 100644
--- a/.github/workflows/TagBot.yml
+++ b/.github/workflows/TagBot.yml
@@ -1,5 +1,4 @@
 name: TagBot
-
 on:
   issue_comment:
     types:
@@ -7,17 +6,21 @@ on:
   workflow_dispatch:
     inputs:
       lookback:
-        default: 3
-
-permissions:
-  contents: write
-
+        description: "[DEPRECATED] No longer has any effect"
+        default: "3"
 jobs:
   TagBot:
     if: github.event_name == 'workflow_dispatch' || github.actor == 'JuliaTagBot'
+    # ubuntu-slim doesn't support containers, and thus won't work
     runs-on: ubuntu-latest
     steps:
-      - uses: JuliaRegistries/TagBot@v1
+      - uses: JuliaRegistries/TagBot@6b7c22e7bc2b8f4d1c56b7199a63421cf2667ed1 # v1.25.7
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
+          # For commits that modify workflow files: SSH key enables tagging, but
+          # releases require manual creation. For full automation of such commits,
+          # use a PAT with `workflow` scope instead of GITHUB_TOKEN.
+          # See: https://github.com/JuliaRegistries/TagBot#commits-that-modify-workflow-files
           ssh: ${{ secrets.DOCUMENTER_KEY }}
+          # ssh: ${{ secrets.NAME_OF_MY_SSH_PRIVATE_KEY_SECRET }}
+          # changelog_format: github  # 'custom' (default), 'github', or 'conventional'
\ No newline at end of file