Skip to content

Pin GHA dependencies - #9032

Open
ulgens wants to merge 2 commits into
processing:mainfrom
ulgens:pin-gha-deps
Open

Pin GHA dependencies#9032
ulgens wants to merge 2 commits into
processing:mainfrom
ulgens:pin-gha-deps

Conversation

@ulgens

@ulgens ulgens commented Aug 2, 2026

Copy link
Copy Markdown

Thanks to https://github.com/suzuki-shunsuke/pinact

Changes:

  • Pins GHA dependencies

PR Checklist

Thanks to https://github.com/suzuki-shunsuke/pinact

* Follows the recommended pattern from processing#8674 (comment)
* Complementary to processing#8620

@Vaivaswat2244 Vaivaswat2244 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm. A small change recommended.

- name: Checkout code
uses: actions/checkout@v4
- uses: actions/setup-node@v4
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

actions/checkout now has two different pins. continuous-release.yml gets 11d5960a (v4.4.0) because it was on the floating @v4, while ci-test, ci-lint, contributors-png and stewards-update stay at 34e11487 (v4.3.1). Could you bump all five to v4.4.0? Turns future bumps into one find/replace instead of two.

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Resolved.

@p5-bot

p5-bot Bot commented Aug 3, 2026

Copy link
Copy Markdown

Continuous Release

CDN link

Published Packages

Commit hash: 3ef0a70

Previous deployments

This is an automated message.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants