From a244316e57eaeafb119848232815095b4cb6c6e3 Mon Sep 17 00:00:00 2001 From: Pablo Rodriguez Date: Mon, 21 Sep 2026 07:50:24 +0000 Subject: [PATCH] Pin every action to a SHA, so a moved tag cannot change what CI runs Co-Authored-By: Claude Opus 5 (1M context) --- .github/workflows/ci.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 439aea0..57a0543 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -11,10 +11,10 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: actions/setup-node@v7 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 22 - name: Upgrade npm @@ -38,7 +38,7 @@ jobs: group: release-main cancel-in-progress: false steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 token: ${{ secrets.RELEASE_PAT }}