Skip to content

chore(ci): correct actions/cache pin comment to actual version v5.0.5 - #41482

Merged
hainenber merged 1 commit into
masterfrom
chore(ci)/cache-ref-version-2553
Jun 28, 2026
Merged

chore(ci): correct actions/cache pin comment to actual version v5.0.5#41482
hainenber merged 1 commit into
masterfrom
chore(ci)/cache-ref-version-2553

Conversation

@rusackas

Copy link
Copy Markdown
Member

SUMMARY

The actions/cache action is pinned by SHA 27d5ce7f107fe9357f9df03efb73ab90386fccae in three workflow steps, but the trailing comment reads # v5. That SHA actually corresponds to tag v5.0.5; the floating v5 tag points to a different commit (caa2961...). The comment therefore misrepresents the pinned version.

This updates the comment to the truthful version (# v5.0.5) so it matches the pinned commit. No SHA change, so runtime behavior is identical.

Affected files:

  • .github/workflows/release.yml (2 steps)
  • .github/workflows/pre-commit.yml (1 step)

Resolves code-scanning alert #2553 (zizmor ref-version-mismatch).

BEFORE/AFTER

Before: uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
After: uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5

TESTING INSTRUCTIONS

pre-commit run --files .github/workflows/release.yml .github/workflows/pre-commit.yml — zizmor passes.

ADDITIONAL INFORMATION

  • Has associated issue:
  • Required feature flags:
  • Changes UI
  • Includes DB Migration (follow approval process in SIP-59)
    • Migration is atomic, supports rollback & is backwards-compatible
    • Confirm DB migration upgrade and downgrade tested
    • Runtime estimates and downtime expectations provided
  • Introduces new feature or API
  • Removes existing feature or API

🤖 Generated with Claude Code

The pinned SHA 27d5ce7f107fe9357f9df03efb73ab90386fccae corresponds to
actions/cache tag v5.0.5, not the floating v5 tag (which points to a
different commit). Update the comment to the truthful version so it
matches the pinned commit.

Resolves code-scanning alert #2553 (zizmor ref-version-mismatch).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@dosubot dosubot Bot added the github_actions Pull requests that update GitHub Actions code label Jun 27, 2026
@bito-code-review

bito-code-review Bot commented Jun 27, 2026

Copy link
Copy Markdown
Contributor

Bito Automatic Review Skipped - Files Excluded

Bito didn't auto-review this change because all changed files are in the exclusion list for automatic reviews. No action is needed if you didn't intend for the agent to review it. Otherwise, to manually trigger a review, type /review in a comment and save.
You can change the excluded files settings here, or contact your Bito workspace admin at evan@preset.io.

@hainenber
hainenber merged commit d026844 into master Jun 28, 2026
54 checks passed
@hainenber
hainenber deleted the chore(ci)/cache-ref-version-2553 branch June 28, 2026 04:41
shantanukhond pushed a commit to shantanukhond/superset that referenced this pull request Jun 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

github_actions Pull requests that update GitHub Actions code size/XS

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants