From d3b2218a277d878f00e1167cc32a47ebcb738517 Mon Sep 17 00:00:00 2001 From: ivaresarthak-cloud Date: Sun, 17 May 2026 13:09:25 +0000 Subject: [PATCH 1/2] ci: pin mutable action tags to full commit SHAs Signed-off-by: ivaresarthak-cloud --- .github/workflows/release.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index e24164e..292127e 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -16,7 +16,7 @@ jobs: contents: write pull-requests: write steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 - name: Update repo run: | . ./update.sh @@ -26,7 +26,7 @@ jobs: export RELEASE=$(git for-each-ref --format="%(refname:short)" --sort=-authordate --count=1 refs/tags || true) rm -rf github-action echo "release=${RELEASE}" >> $GITHUB_ENV - - uses: peter-evans/create-pull-request@v4 + - uses: peter-evans/create-pull-request@2b011faafdcbc9ceb11414d64d0573f37c774b04 # v4.2.3 if: env.latest != env.current with: add-paths: | From f31cf3f9311e078fd59242a80cd7f4e3c4c2d83e Mon Sep 17 00:00:00 2001 From: ivaresarthak-cloud Date: Sun, 17 May 2026 13:38:29 +0000 Subject: [PATCH 2/2] ci: upgrade peter-evans/create-pull-request to v8.1.1 Signed-off-by: ivaresarthak-cloud --- .github/workflows/release.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 292127e..db0fba1 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -26,7 +26,7 @@ jobs: export RELEASE=$(git for-each-ref --format="%(refname:short)" --sort=-authordate --count=1 refs/tags || true) rm -rf github-action echo "release=${RELEASE}" >> $GITHUB_ENV - - uses: peter-evans/create-pull-request@2b011faafdcbc9ceb11414d64d0573f37c774b04 # v4.2.3 + - uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1 if: env.latest != env.current with: add-paths: |