chore(ci): bump publish workflow to v1.0.6 - #38
Conversation
…entral) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
📝 WalkthroughWalkthroughThe Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Review rate limit: 0/1 reviews remaining, refill in 60 minutes.Comment |
There was a problem hiding this comment.
🧹 Nitpick comments (1)
.github/workflows/publish.yml (1)
28-28: Pin reusable workflow by commit SHA instead of mutable tag.Using
@v1.0.6is convenient, but tags can be retargeted. For release/publish pipelines, pinning to the exact commit SHA is safer and more reproducible. Replace with:uses: MobileByteLabs/mbl-actionhub/.github/workflows/publish-kmp-library.yml@87d34544e815ca890157f0823231ab3c4f9bf657🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed. In @.github/workflows/publish.yml at line 28, Replace the reusable workflow reference that currently uses the mutable tag "MobileByteLabs/mbl-actionhub/.github/workflows/publish-kmp-library.yml@v1.0.6" with the pinned commit SHA form "MobileByteLabs/mbl-actionhub/.github/workflows/publish-kmp-library.yml@87d34544e815ca890157f0823231ab3c4f9bf657" so the publish workflow is deterministic and cannot be retargeted; update the `uses:` value in the publish.yml entry that references the reusable workflow accordingly.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Nitpick comments:
In @.github/workflows/publish.yml:
- Line 28: Replace the reusable workflow reference that currently uses the
mutable tag
"MobileByteLabs/mbl-actionhub/.github/workflows/publish-kmp-library.yml@v1.0.6"
with the pinned commit SHA form
"MobileByteLabs/mbl-actionhub/.github/workflows/publish-kmp-library.yml@87d34544e815ca890157f0823231ab3c4f9bf657"
so the publish workflow is deterministic and cannot be retargeted; update the
`uses:` value in the publish.yml entry that references the reusable workflow
accordingly.
ℹ️ Review info
⚙️ Run configuration
Configuration used: defaults
Review profile: CHILL
Plan: Pro
Run ID: c9fd25cb-94f9-4be5-a4de-3ffff9d4c848
📒 Files selected for processing (1)
.github/workflows/publish.yml
Summary
publish-kmp-library.ymlfrom@v1.0.5to@v1.0.6Test plan
🤖 Generated with Claude Code
Summary by CodeRabbit