diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f716b70f..fc51b57c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -233,7 +233,7 @@ jobs:
 
     - name: Publish to PyPI - on tag
       if: startsWith(github.ref, 'refs/tags/')
-      uses: pypa/gh-action-pypi-publish@v1.4.2
+      uses: pypa/gh-action-pypi-publish@37f50c210e3d2f9450da2cd423303d6a14a6e29f
       with:
         password: ${{ secrets.PYPI_TOKEN }}
         verbose: true
@@ -258,12 +258,6 @@ jobs:
       - pypi-publish
     steps:
       - name: Require all successes
-        shell: python
-        env:
-          RESULTS: ${{ toJSON(needs.*.result) }}
-        run: |
-          import json
-          import os
-          import sys
-          results = json.loads(os.environ["RESULTS"])
-          sys.exit(0 if all(result == "success" for result in results) else 1)
+        uses: re-actors/alls-green@3a2de129f0713010a71314c74e33c0e3ef90e696
+        with:
+          jobs: ${{ toJSON(needs) }}
diff --git a/src/towncrier/newsfragments/402.misc.rst b/src/towncrier/newsfragments/402.misc.rst
new file mode 100644
index 00000000..e69de29b