[github-actions] Pin workflow actions - #5
Merged
Conversation
Pin the `actions/checkout`, `crystal-lang/install-crystal`, and `actions/cache` references in `.github/workflows/ci.yml` to the supplied full commit SHAs while retaining release comments for Dependabot and reviewability. Add `.github/dependabot.yml` with a weekly `github-actions` update at `/`; no existing ecosystem configuration was present to preserve. The workflow uses only `ubuntu-latest`, no action inputs or outputs beyond cache `path` and `key`, and retains its existing read-only `permissions`. No relevant breaking changes were identified for this configuration. codex resume 01a03552-f7e8-70b1-8d2e-de274da6adc3
Ameba 1.6.4 depends on `Crystal::Lexer#next_string_array_token`, which Crystal 1.21 removed. Pin the unreleased compatibility fix from crystal-ameba/ameba#741 until it reaches a stable release. That revision drops its postinstall build, so compile `bin/ameba.cr` explicitly after a binary-cache miss. Avoid reinstalling the freshly resolved shard and omit the deprecated `-Dpreview_mt` flag. Accept the new lint rules by correcting boolean matchers and macro whitespace. Disable `Lint/AssignmentInCallArgument` because memoized method definitions are macro arguments and legitimate assignments in their bodies otherwise produce false positives. codex resume 01a03576-06ae-7c61-b8ec-6fcd0512ad60
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Pin the
actions/checkout,crystal-lang/install-crystal, andactions/cachereferences in.github/workflows/ci.ymlto the supplied full commit SHAs while retaining release comments for Dependabot and reviewability.Add
.github/dependabot.ymlwith a weeklygithub-actionsupdate at/; no existing ecosystem configuration was present to preserve.The workflow uses only
ubuntu-latest, no action inputs or outputs beyond cachepathandkey, and retains its existing read-onlypermissions. No relevant breaking changes were identified for this configuration.codex resume 01a03552-f7e8-70b1-8d2e-de274da6adc3