From bbc27357780be2a32cf0a4a805c1e7bdaa89dc41 Mon Sep 17 00:00:00 2001 From: jcpitre Date: Thu, 23 Apr 2026 11:01:26 -0400 Subject: [PATCH] fix: use official gtfs-validator v7.1.0 release tag instead of USED_BY_GBFS_VALIDATOR_JAVA --- .github/workflows/deploy-snapshot.yml | 4 ++-- .github/workflows/release.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/deploy-snapshot.yml b/.github/workflows/deploy-snapshot.yml index b7d64fe..358a90b 100644 --- a/.github/workflows/deploy-snapshot.yml +++ b/.github/workflows/deploy-snapshot.yml @@ -53,8 +53,8 @@ jobs: ${{ runner.os }}- - name: Load secrets from 1Password if: env.HAS_1PASSWORD == 'true' - # Pinned to a specific tag for supply-chain safety. Update the tag in gtfs-validator if the action changes. - uses: MobilityData/gtfs-validator/.github/actions/extract-1password-secret@USED_BY_GBFS_VALIDATOR_JAVA # 7bf2832 + # Uses the official gtfs-validator release tag. Update to a newer release tag when the action changes. + uses: MobilityData/gtfs-validator/.github/actions/extract-1password-secret@v7.1.0 with: OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }} VARIABLES_TO_EXTRACT: 'MAVEN_GPG_PASSPHRASE, MAVEN_GPG_PRIVATE_KEY, MAVEN_CENTRAL_PORTAL_TOKEN_USERNAME, MAVEN_CENTRAL_PORTAL_TOKEN_PASSWORD' diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 39f0077..0b7235b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -56,8 +56,8 @@ jobs: ${{ runner.os }}- - name: Load secrets from 1Password if: env.HAS_1PASSWORD == 'true' - # Pinned to a specific tag for supply-chain safety. Update the tag in gtfs-validator if the action changes. - uses: MobilityData/gtfs-validator/.github/actions/extract-1password-secret@USED_BY_GBFS_VALIDATOR_JAVA # 7bf2832 + # Uses the official gtfs-validator release tag. Update to a newer release tag when the action changes. + uses: MobilityData/gtfs-validator/.github/actions/extract-1password-secret@v7.1.0 with: OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }} VARIABLES_TO_EXTRACT: 'MAVEN_GPG_PASSPHRASE, MAVEN_GPG_PRIVATE_KEY, MAVEN_CENTRAL_PORTAL_TOKEN_USERNAME, MAVEN_CENTRAL_PORTAL_TOKEN_PASSWORD'