Skip to content

Updated Blacksmith action pins#28171

Merged
9larsons merged 1 commit into
blacksmith-migration-263ee04from
codex/pin-blacksmith-actions
May 26, 2026
Merged

Updated Blacksmith action pins#28171
9larsons merged 1 commit into
blacksmith-migration-263ee04from
codex/pin-blacksmith-actions

Conversation

@9larsons
Copy link
Copy Markdown
Contributor

Summary

  • pinned the new Blacksmith workflow actions to full-length commit SHAs
  • kept the tag names as comments for readability

Context

The workflow security policy rejects tag-pinned actions, and PR #28047 introduced useblacksmith/setup-docker-builder@v1 and useblacksmith/build-push-action@v2.

Testing

  • git diff --check HEAD~1..HEAD
  • rg -n "useblacksmith/(setup-docker-builder|build-push-action)@v" .github/workflows || true

ref #28047

The Blacksmith migration introduced tag-pinned actions, but repository security policy now requires third-party actions to use full-length commit SHAs.
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented May 26, 2026

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: f57b7f83-5f35-430c-aa8d-c5d70e56e2a9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch codex/pin-blacksmith-actions

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@9larsons 9larsons merged commit 957aab9 into blacksmith-migration-263ee04 May 26, 2026
20 checks passed
@9larsons 9larsons deleted the codex/pin-blacksmith-actions branch May 26, 2026 23:00
@codecov
Copy link
Copy Markdown

codecov Bot commented May 26, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.90%. Comparing base (1102100) to head (957aab9).
⚠️ Report is 1 commits behind head on blacksmith-migration-263ee04.

Additional details and impacted files
@@                       Coverage Diff                        @@
##           blacksmith-migration-263ee04   #28171      +/-   ##
================================================================
+ Coverage                         73.86%   73.90%   +0.04%     
================================================================
  Files                              1530     1530              
  Lines                            129791   129809      +18     
  Branches                          15575    15639      +64     
================================================================
+ Hits                              95871    95939      +68     
+ Misses                            32933    32884      -49     
+ Partials                            987      986       -1     
Flag Coverage Δ
admin-tests 54.10% <ø> (ø)
e2e-tests 73.90% <ø> (+0.04%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant