Skip to content

Pin GitHub action references#725

Merged
pietern merged 1 commit intomainfrom
pin-actions
Mar 23, 2026
Merged

Pin GitHub action references#725
pietern merged 1 commit intomainfrom
pin-actions

Conversation

@pietern
Copy link
Copy Markdown
Contributor

@pietern pietern commented Mar 23, 2026

Summary

  • Pin all GitHub action references to their commit SHAs
  • Each SHA maps to the current tag for the action at the time of pinning

NO_CHANGELOG=true

Pin all GitHub action references to their commit SHAs. Each SHA maps
to the current tag for the action at the time of pinning.

Co-authored-by: Isaac
@pietern pietern temporarily deployed to test-trigger-is March 23, 2026 14:27 — with GitHub Actions Inactive
@pietern pietern temporarily deployed to test-trigger-is March 23, 2026 14:28 — with GitHub Actions Inactive
@github-actions
Copy link
Copy Markdown

If integration tests don't run automatically, an authorized user can run them manually by following the instructions below:

Trigger:
go/deco-tests-run/sdk-java

Inputs:

  • PR number: 725
  • Commit SHA: 283a0be92421cda01e0f856e8366d99406ce06e1

Checks will be approved automatically on success.

@pietern pietern enabled auto-merge March 23, 2026 14:35
@pietern pietern added this pull request to the merge queue Mar 23, 2026
@Divyansh-db Divyansh-db removed this pull request from the merge queue due to a manual request Mar 23, 2026
- name: Create GitHub release
if: "startsWith(github.ref, 'refs/tags/')"
uses: softprops/action-gh-release@v1
uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why not v1.something?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The commit is tagged as both v1 and v0.1.15.

@pietern pietern added this pull request to the merge queue Mar 23, 2026
Merged via the queue into main with commit 940be4d Mar 23, 2026
16 of 17 checks passed
@pietern pietern deleted the pin-actions branch March 23, 2026 14:53
pietern added a commit that referenced this pull request Mar 24, 2026
Follow-up to #725.

Co-authored-by: Isaac
@pietern pietern mentioned this pull request Mar 24, 2026
1 task
hectorcast-db pushed a commit that referenced this pull request Mar 25, 2026
## Summary

- Follow-up to #725 — pins remaining action references that were missed

## Test plan

- [x] Verified all action references pass the pin scan

This pull request was AI-assisted by Isaac.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants