From 07e9f10e2b624e9a09a0131c67c5e0227b975c9e Mon Sep 17 00:00:00 2001
From: root <root@ip-172-26-14-189.ap-northeast-2.compute.internal>
Date: Thu, 30 Jul 2026 08:18:39 +0000
Subject: [PATCH] fix: pin custom OIDC subject support

---
 .github/workflows/seal-runtime-secrets.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/seal-runtime-secrets.yml b/.github/workflows/seal-runtime-secrets.yml
index 21641694..a2e2cc4f 100644
--- a/.github/workflows/seal-runtime-secrets.yml
+++ b/.github/workflows/seal-runtime-secrets.yml
@@ -41,7 +41,7 @@ jobs:
               print(f"oidc_claim_{key}={claims.get(key, 'missing')}")
           PYSAFE
       - name: Create canonical Infra SealedSecret Draft PR
-        uses: Team-PinLog/infra/.github/actions/sealedsecret-infra-pr@b3a924f95d43eef787f7e1b33c1758391a1847c0
+        uses: Team-PinLog/infra/.github/actions/sealedsecret-infra-pr@86131e692f831b6b185833f0efcd18ff9ef84462
         env:
           JWT_PRIVATE_KEY: ${{ secrets.JWT_PRIVATE_KEY }}
           GOOGLE_CLIENT_ID: ${{ secrets.GOOGLE_CLIENT_ID }}