Skip to content

Pin GitHub Actions to commit SHAs - #826

Merged
externl merged 2 commits into
mainfrom
pin-actions
Sep 14, 2026
Merged

externl merged 2 commits into
mainfrom
pin-actions

Conversation

@externl

@externl externl commented Sep 14, 2026

Copy link
Copy Markdown
Member

Actions referenced by a tag can change under us; a commit SHA cannot.

  • Every uses: now points at the commit behind the latest release in its major, with the version as a trailing comment.
  • Adds the standard Dependabot config for GitHub Actions so the pins keep moving.
  • dtolnay/rust-toolchain needs toolchain: stable passed explicitly once it is referenced by SHA rather than by branch.

@externl externl added this to the 0.4.1 milestone Sep 14, 2026
@externl
externl merged commit 60c7802 into main Sep 14, 2026
7 checks passed
@externl
externl deleted the pin-actions branch September 14, 2026 16:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant