Skip to content

v0.12.289 — CI actions pinned to commit SHAs

Choose a tag to compare

View all tags
@VickyXAI VickyXAI released this 16 Oct 20:34
· 7 commits to main since this release
v0.12.289
6439500

CI actions pinned to commit SHAs

Every GitHub Action in the CI, publish, integration and brand-sync workflows
is now pinned to an immutable commit SHA instead of a floating tag. Each pin is
the commit its tag already resolved to, so the workflows run the same code as
before, and the publish workflow (which holds the npm token) can no longer pick
up a retagged action. Dependabot now also watches the github-actions
ecosystem, so the pins get upgrade PRs (#465).

No runtime change to the plugin.

Assets 2
Loading