Skip to content

chore: Update and pin all GHA actions#2847

Merged
mjameswh merged 2 commits intomasterfrom
pin-gha-actions
Apr 18, 2026
Merged

chore: Update and pin all GHA actions#2847
mjameswh merged 2 commits intomasterfrom
pin-gha-actions

Conversation

@mjameswh
Copy link
Copy Markdown
Contributor

@mjameswh mjameswh commented Apr 17, 2026

What changed

  • Bump all GitHub Actions workflows to use latest "safe" releases.
    "Safe" is defined as the latest published release that is at least 2 weeks old (cooldown period).
  • Pin all GHA actions usage to full SHA1, with a version comment.

Why

  • Improved security.

@mjameswh mjameswh requested a review from a team as a code owner April 17, 2026 23:16
@mjameswh mjameswh enabled auto-merge (squash) April 18, 2026 00:03
@mjameswh mjameswh merged commit a9389e6 into master Apr 18, 2026
18 checks passed
@mjameswh mjameswh deleted the pin-gha-actions branch April 18, 2026 00:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants