diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index adb03144..7ffaced9 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -44,7 +44,8 @@ jobs:
           path: Themerr-plex.bundle
 
       - name: Set up Python
-        uses: LizardByte/setup-python-action@v2023.10.23-7bf3fc9
+        # dependabot cannot pick up our tags, so use the commit hash
+        uses: LizardByte/setup-python-action@8851ba6849c1003134ced0581b34204f0c322cad
         with:
           python-version: '2.7'
 
@@ -145,7 +146,8 @@ jobs:
           rm Themerr-plex.bundle.zip
 
       - name: Set up Python
-        uses: LizardByte/setup-python-action@v2023.10.23-7bf3fc9
+        # dependabot cannot pick up our tags, so use the commit hash
+        uses: LizardByte/setup-python-action@8851ba6849c1003134ced0581b34204f0c322cad
         with:
           python-version: '2.7'
 
@@ -203,7 +205,7 @@ jobs:
           cat "${log_file}"
 
       - name: Upload coverage
-        # any except cancelled or skipped
+        # any except canceled or skipped
         if: always() && (steps.test.outcome == 'success' || steps.test.outcome == 'failure')
         uses: codecov/codecov-action@v3
         with: