From 8ff8b2233931406ea69ac3203afdb2d8142d3341 Mon Sep 17 00:00:00 2001
From: Mykhailo Chalyi <mykhailo.chalyi-contractor@procore.com>
Date: Sat, 23 May 2026 19:27:31 -0500
Subject: [PATCH] fix(ci): harden python wheel builds

---
 .github/workflows/python.yml | 34 ++++++++++++++++------------------
 1 file changed, 16 insertions(+), 18 deletions(-)

diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
index e50fcb84..020c4990 100644
--- a/.github/workflows/python.yml
+++ b/.github/workflows/python.yml
@@ -33,6 +33,7 @@ permissions:
 env:
   CARGO_TERM_COLOR: always
   RUST_BACKTRACE: 1
+  MATURIN_VERSION: ">=1.4,<2.0"
 
 jobs:
   lint:
@@ -77,13 +78,12 @@ jobs:
 
       - uses: Swatinem/rust-cache@v2
 
+      - name: Install maturin
+        run: python -m pip install "maturin${MATURIN_VERSION}"
+
       - name: Build wheel
-        uses: PyO3/maturin-action@v1
-        with:
-          command: build
-          args: --release --out dist -i python${{ matrix.python-version }}
-          rust-toolchain: stable
-          working-directory: crates/bashkit-python
+        working-directory: crates/bashkit-python
+        run: python -m maturin build --release --out dist -i python${{ matrix.python-version }}
 
       - name: Install wheel and test dependencies
         run: |
@@ -118,13 +118,12 @@ jobs:
 
       - uses: Swatinem/rust-cache@v2
 
+      - name: Install maturin
+        run: python -m pip install "maturin${MATURIN_VERSION}"
+
       - name: Build wheel
-        uses: PyO3/maturin-action@v1
-        with:
-          command: build
-          args: --release --out dist -i python3.12
-          rust-toolchain: stable
-          working-directory: crates/bashkit-python
+        working-directory: crates/bashkit-python
+        run: python -m maturin build --release --out dist -i python3.12
 
       - name: Install local wheel
         run: |
@@ -164,13 +163,12 @@ jobs:
         with:
           python-version: "3.12"
 
+      - name: Install maturin
+        run: python -m pip install "maturin${MATURIN_VERSION}"
+
       - name: Build wheel
-        uses: PyO3/maturin-action@v1
-        with:
-          command: build
-          args: --release --out dist
-          rust-toolchain: stable
-          working-directory: crates/bashkit-python
+        working-directory: crates/bashkit-python
+        run: python -m maturin build --release --out dist
 
       - name: Verify wheel metadata
         run: |