From 661e87704a14743d23c69f5e2e6d244bbc0e5c7a Mon Sep 17 00:00:00 2001 From: Test User Date: Tue, 22 Sep 2026 18:49:32 -0700 Subject: [PATCH] ci: pin remaining GitHub Actions to immutable commits --- .github/workflows/pr-title.yml | 2 +- .github/workflows/pr.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml index fd355cd..8295c63 100644 --- a/.github/workflows/pr-title.yml +++ b/.github/workflows/pr-title.yml @@ -14,6 +14,6 @@ jobs: ValidatePrTitle: runs-on: ubuntu-latest steps: - - uses: amannn/action-semantic-pull-request@v5 + - uses: amannn/action-semantic-pull-request@e32d7e603df1aa1ba07e981f2a23455dee596825 # v5 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index ccbe24a..4dae7e5 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: ref: ${{ github.event.pull_request.head.sha || github.ref }} @@ -64,7 +64,7 @@ jobs: Write-Host "Testing source archive pinned to $env:HEAD_SHA" - name: Setup Tooling - uses: oven-sh/setup-bun@v2 + uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2 with: bun-version: 1.3.2