Skip to content

chore: pin GitHub Actions to full-length commit SHAs#31

Merged
joshuarli merged 1 commit intomainfrom
pin-gha-actions
Mar 25, 2026
Merged

chore: pin GitHub Actions to full-length commit SHAs#31
joshuarli merged 1 commit intomainfrom
pin-gha-actions

Conversation

@joshuarli
Copy link
Member

Summary

  • Pin all GitHub Actions references in .github/ workflow files to full-length commit SHAs

Generated by devenv pin_gha.

🤖 Generated with Claude Code

@joshuarli joshuarli requested a review from geoffg-sentry March 24, 2026 07:01
@github-actions
Copy link

Semver Impact of This PR

🟢 Patch (bug fixes)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).


Bug Fixes 🐛

  • (security) Replace execSync with execFileSync to prevent command injection by fix-it-felix-sentry in #30

Internal Changes 🔧

Release

  • Fix changelog-preview permissions by BYK in #29
  • Bump Craft version to fix issues by BYK in #27
  • Switch from action-prepare-release to Craft by BYK in #25

Other

  • Pin GitHub Actions to full-length commit SHAs by joshuarli in #31
  • Use pull_request_target for changelog preview by BYK in #28
  • macos-13 deprecation by timfish in #26

🤖 This preview updates automatically when you update the PR.

@joshuarli joshuarli merged commit 5531e04 into main Mar 25, 2026
65 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant