From f6c6e92b1b0052707d6a2da243388d6676840692 Mon Sep 17 00:00:00 2001 From: Jarek Potiuk Date: Wed, 29 Apr 2026 01:59:50 +0200 Subject: [PATCH 1/2] Add j178/prek-action to allowlist --- actions.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/actions.yml b/actions.yml index c4d0a705..0a7cb339 100644 --- a/actions.yml +++ b/actions.yml @@ -484,6 +484,9 @@ ilammy/msvc-dev-cmd: ilammy/setup-nasm: 72793074d3c8cdda771dba85f6deafe00623038b: tag: v1.5.2 +j178/prek-action: + '0bb87d7f00b0c99306c8bcb8b8beba1eb581c037': + keep: true JamesIves/github-pages-deploy-action: d92aa235d04922e8f08b40ce78cc5442fcfbfa2f: tag: v4.8.0 From 70dc715d9efff61655e6f1dbf73059446e7c65e3 Mon Sep 17 00:00:00 2001 From: Jarek Potiuk Date: Wed, 29 Apr 2026 02:46:38 +0200 Subject: [PATCH 2/2] Update j178/prek-action approval to v2.0.2 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Switch from the original commit (0bb87d7f, old composite-action era using unverified curl-pipe-to-shell of prek-installer.sh) to v2.0.2 (cbc2f23e), the latest tagged release. v2.0.2 is a TypeScript JS action that downloads release tarballs via @actions/tool-cache and verifies each artefact with crypto.createHash('sha256') against checksums from the action's bundled known-checksums.ts manifest. verify-action-build now passes cleanly: binary download verification ✓, JS build verification ✓ (compiled JS matches rebuild), all other checks ✓. Generated-by: Claude Opus 4.7 (1M context) --- actions.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/actions.yml b/actions.yml index 0a7cb339..be8326e5 100644 --- a/actions.yml +++ b/actions.yml @@ -485,8 +485,8 @@ ilammy/setup-nasm: 72793074d3c8cdda771dba85f6deafe00623038b: tag: v1.5.2 j178/prek-action: - '0bb87d7f00b0c99306c8bcb8b8beba1eb581c037': - keep: true + cbc2f23eb5539cf20d82d1aabd0d0ecbcc56f4e3: + tag: v2.0.2 JamesIves/github-pages-deploy-action: d92aa235d04922e8f08b40ce78cc5442fcfbfa2f: tag: v4.8.0