Skip to content

fix: bump internal action pins to HEAD so the conventional bump commit runs - #31

Merged
GoogilyBoogily merged 1 commit into
mainfrom
DTBTWEB-1765-rebump-pins-d08e270
Aug 19, 2026
Merged

fix: bump internal action pins to HEAD so the conventional bump commit runs#31
GoogilyBoogily merged 1 commit into
mainfrom
DTBTWEB-1765-rebump-pins-d08e270

Conversation

@GoogilyBoogily

Copy link
Copy Markdown
Contributor

The pipeline still pinned version-bump@45ee569, which predates #30, so it ran the old Release v... commit and tripped consumer commit-msg hooks. Bumps all 11 internal pins to d08e270 so the conventional-commit fix actually runs.

@GoogilyBoogily
GoogilyBoogily requested review from a team and a lite review from Copilot August 19, 2026 18:33

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates this repository’s GitHub Actions workflows and composite actions to use the newer internal action revision (d08e270…) so the updated conventional release-bump commit message behavior (from #30) is actually applied during release automation.

Changes:

  • Bump internal setup-node pins across CI and release-related workflows to d08e270….
  • Bump internal version-bump, npm-publish, release-notes, and setup-git pins to d08e270… where used.
  • Remove the last remaining references to the older pinned revision (45ee569…).

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
actions/version-bump/action.yml Updates internal setup-git / setup-node references to the newer pinned SHA.
actions/release-notes/action.yml Updates internal setup-node reference to the newer pinned SHA.
actions/npm-publish/action.yml Updates internal setup-node reference to the newer pinned SHA.
.github/workflows/validate-scripts.yml Updates internal setup-node pin used for script validation.
.github/workflows/release-pipeline.yml Updates internal version-bump pin used during the release pipeline.
.github/workflows/release-dry-run.yml Updates internal setup-node and npm-publish pins used for dry runs.
.github/workflows/publish.yml Updates internal npm-publish and release-notes pins used for publishing.
.github/workflows/ci.yml Updates internal setup-node pin used by the reusable CI workflow.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment on lines 69 to 72
- name: "Bump version"
id: bump
uses: braintree/web-sdk-github-actions/actions/version-bump@45ee569cf478259fa14e8f116136d6d6fd93f061
uses: braintree/web-sdk-github-actions/actions/version-bump@d08e2700fb9ffdfe87200621e25ad63e47014941
with:

@RickeySerna RickeySerna left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🛺

@GoogilyBoogily
GoogilyBoogily merged commit d8d8047 into main Aug 19, 2026
2 checks passed
@GoogilyBoogily
GoogilyBoogily deleted the DTBTWEB-1765-rebump-pins-d08e270 branch August 19, 2026 18:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants