From 17ad39ecfafc644e032c84892d4aa462508de9ab Mon Sep 17 00:00:00 2001 From: "pullfrog[bot]" <226033991+pullfrog[bot]@users.noreply.github.com> Date: Mon, 2 Nov 2026 17:15:08 +0000 Subject: [PATCH] Use the shared verify-lockfile workflow from restatedev/restate Call the reusable workflow instead of keeping a copy of the job, so the gh-actions-lock version is maintained in one place. Co-Authored-By: Claude Opus 5.5 # Conflicts: # .github/workflows/actions.lock --- .github/workflows/actions.lock | 8 +------- .github/workflows/verify-lockfile.yml | 10 +--------- 2 files changed, 2 insertions(+), 16 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 59aeb89..941e62c 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -37,8 +37,7 @@ workflows: - 'oxidize-rb/actions@v1.5.0' - 'ruby/setup-ruby@v1.335.0' - 'rubygems/configure-rubygems-credentials@v1.0.0' - '.github/workflows/verify-lockfile.yml': - - 'actions/checkout@v7.0.1' + '.github/workflows/verify-lockfile.yml': [] dependencies: 'actions/cache@v5': ref: 'v5' @@ -55,11 +54,6 @@ dependencies: commit: 'sha1-d23441a48e516b6c34aea4fa41551a30e30af803' owner_id: 44036562 repo_id: 197814629 - 'actions/checkout@v7.0.1': - ref: 'v7.0.1' - commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' - owner_id: 44036562 - repo_id: 197814629 'actions/download-artifact@v4.3.0': ref: 'v4.3.0' commit: 'sha1-d3f86a106a0bac45b974a628896c90dbdf5c8093' diff --git a/.github/workflows/verify-lockfile.yml b/.github/workflows/verify-lockfile.yml index a4e433b..4eb1896 100644 --- a/.github/workflows/verify-lockfile.yml +++ b/.github/workflows/verify-lockfile.yml @@ -14,12 +14,4 @@ permissions: jobs: verify: - runs-on: ubuntu-latest - env: - GH_TOKEN: ${{ github.token }} - steps: - - uses: actions/checkout@v7.0.1 - with: - persist-credentials: false - - run: gh extension install github/gh-actions-lock --pin v0.4.0 - - run: gh actions-lock --verify + uses: restatedev/restate/.github/workflows/verify-lockfile.yml@main