diff --git a/.github/workflows/update-binary.yml b/.github/workflows/update-binary.yml
index d9170f0..1c0a209 100644
--- a/.github/workflows/update-binary.yml
+++ b/.github/workflows/update-binary.yml
@@ -4,7 +4,13 @@ on:
     tags:
     - 'b*'
 
-permissions: {}
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
 
 jobs:
   build-stubs:
@@ -29,7 +35,7 @@ jobs:
         TAG_NAME: ${{ github.ref }}
       run: |
         export BUILD_NUMBER=$(basename $TAG_NAME)
-        export PYTHON_TAG=$(python -c "print('${{ matrix.python-version }}'.split('-')[0])")
+        export PYTHON_TAG=${{ matrix.python-version }}
         export STUB_PREFIX=${{ !matrix.framework && 'L' || '' }}
 
         echo "PYTHON_TAG=${PYTHON_TAG}" | tee -a $GITHUB_ENV
@@ -115,7 +121,7 @@ jobs:
 
   make-release:
     name: Make Release
-    runs-on: macos-26
+    runs-on: ubuntu-latest
     needs: [ build-stubs ]
     permissions:
       contents: write
@@ -141,7 +147,7 @@ jobs:
       run: |
         gh release create "${BUILD_NUMBER}" \
           --title "${BUILD_NUMBER}" \
-          --notes "$(printf 'Build %s of the Briefcase macOS stub binary.\n\nIncludes support for Python 3.10-3.14.\n' "${BUILD_NUMBER}")" \
+          --notes "$(printf 'Build %s of the Briefcase macOS stub binary.\n\nIncludes support for Python 3.11-3.15.\n' "${BUILD_NUMBER}")" \
           --draft \
           --verify-tag \
           dist/*
diff --git a/{{ cookiecutter.format }}/briefcase.toml b/{{ cookiecutter.format }}/briefcase.toml
index e258f35..d329c55 100644
--- a/{{ cookiecutter.format }}/briefcase.toml	
+++ b/{{ cookiecutter.format }}/briefcase.toml	
@@ -11,12 +11,20 @@ entitlements_path = "{{ cookiecutter.class_name }}/{{ cookiecutter.app_name }}.e
 
 support_path = "Support"
 {{ {
-    "3.11": "support_revision = 10",
-    "3.12": "support_revision = 10",
-    "3.13": "support_revision = 15",
-    "3.14": "support_revision = 11",
-    "3.15": "support_revision = 0",
+    "3.11": 'support_revision = "10"',
+    "3.12": 'support_revision = "10"',
+    "3.13": 'support_revision = "15"',
+    "3.14": 'support_revision = "11"',
+    "3.15": 'support_revision = "0"',
 }.get(cookiecutter.python_version|py_tag, "") }}
+{{ {
+    "3.11": 'support_package_hash = "sha256:d8073adc317b9f01289fb13646a4c4d3e5005fe4e9c6579f92febc029ccf4bff"',
+    "3.12": 'support_package_hash = "sha256:db6c39b27f849414f442b35540da88d8cdcae55a5f266802cac425de8821f996"',
+    "3.13": 'support_package_hash = "sha256:1e4630ba00f90bde7e44e54386bc5b2b860dce473d70c2cef9fe651642820bc1"',
+    "3.14": 'support_package_hash = "sha256:6b4c4e74128573c2330e579512e538fcc57b02df0748a0eae1b3e8922a71aac3"',
+    "3.15": 'support_package_hash = "sha256:81639ec53cb7a84dad7f68a4d4c0d092edacd8017f5f32ca2129c4ea17a9f6bd"',
+}.get(cookiecutter.python_version|py_tag, "") }}
+
 cleanup_paths = [
     "Support/Python.xcframework/**/python*/config-*-darwin",
     "Support/Python.xcframework/**/pkgconfig",