Skip to content

chore: pin actions to v2.1.0 SHA#21

Merged
devantler merged 2 commits intomainfrom
chore/pin-reusable-workflows-to-sha
Apr 12, 2026
Merged

chore: pin actions to v2.1.0 SHA#21
devantler merged 2 commits intomainfrom
chore/pin-reusable-workflows-to-sha

Conversation

@devantler
Copy link
Copy Markdown
Contributor

Pin all devantler-tech/actions workflow callsites to the latest semver release SHA:
4235593b654b467bb57c2d2f492b1461eab37cba (v2.1.0).

Fixes N/A

Type of change

EOF- [ ] - [ ] - [ ] - [ ] - [x]

devantler and others added 2 commits April 12, 2026 21:51
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Pins GitHub Action/reusable-workflow references to newer commit SHAs, with an apparent goal of standardizing on a specific released version.

Changes:

  • Updated reusable workflow callsites for scan-for-todo-comments and create-release from v2.0.0 to v2.2.0 (new pinned SHA).
  • Updated the labels sync action invocation to a new action repository and pinned it to v2.1.0 SHA.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.

File Description
.github/workflows/todos.yaml Bumps reusable workflow ref to a newer pinned SHA (v2.2.0).
.github/workflows/sync-labels.yaml Switches to a different labels-sync action repo and pins to v2.1.0 SHA.
.github/workflows/release.yaml Bumps reusable workflow ref to a newer pinned SHA (v2.2.0).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/workflows/todos.yaml
Comment thread .github/workflows/release.yaml
Comment thread .github/workflows/sync-labels.yaml
@github-actions
Copy link
Copy Markdown

MegaLinter analysis: Success

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 5 0 0 0.04s
✅ COPYPASTE jscpd yes no no 1.46s
✅ GO golangci-lint yes yes no no 14.03s
✅ JSON jsonlint 2 0 0 0.55s
✅ JSON prettier 2 0 0 0 0.47s
✅ JSON v8r 2 0 0 3.2s
✅ MARKDOWN markdownlint 1 0 0 0 0.89s
✅ MARKDOWN markdown-table-formatter 1 0 0 0 0.22s
✅ REPOSITORY checkov yes no no 17.77s
✅ REPOSITORY gitleaks yes no no 0.11s
✅ REPOSITORY git_diff yes no no 0.0s
✅ REPOSITORY grype yes no no 36.89s
✅ REPOSITORY secretlint yes no no 0.81s
✅ REPOSITORY syft yes no no 2.14s
✅ REPOSITORY trivy yes no no 10.34s
✅ REPOSITORY trivy-sbom yes no no 0.37s
✅ REPOSITORY trufflehog yes no no 4.22s
✅ SPELL cspell 19 0 0 4.04s
✅ SPELL lychee 12 0 0 0.93s
✅ YAML prettier 9 0 0 0 0.75s
✅ YAML v8r 9 0 0 8.49s
✅ YAML yamllint 9 0 0 0.59s

See detailed reports in MegaLinter artifacts

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

@devantler devantler merged commit 58c4724 into main Apr 12, 2026
17 of 19 checks passed
@devantler devantler deleted the chore/pin-reusable-workflows-to-sha branch April 12, 2026 21:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants