Fixed missed pinned GHA actions not being updated with Renovate.

[AlexSkrypnyk]

Summary by CodeRabbit

• Chores
  • Updated GitHub Actions workflow configurations with pinned action references for improved stability and reproducibility of deployment processes.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 0149c74f-937b-4194-b5df-14ea35520b4e

📥 Commits

Reviewing files that changed from the base of the PR and between e7e8ad8 and 70bc5be.

⛔ Files ignored due to path filters (4)

• .vortex/installer/tests/Fixtures/handler_process/_baseline/.github/workflows/build-test-deploy.yml is excluded by !.vortex/installer/tests/Fixtures/**
• .vortex/installer/tests/Fixtures/handler_process/_baseline/.github/workflows/label-merge-conflict.yml is excluded by !.vortex/installer/tests/Fixtures/**
• .vortex/installer/tests/Fixtures/handler_process/deploy_types_none_gha/.github/workflows/build-test-deploy.yml is excluded by !.vortex/installer/tests/Fixtures/**
• .vortex/installer/tests/Fixtures/handler_process/provision_profile/.github/workflows/build-test-deploy.yml is excluded by !.vortex/installer/tests/Fixtures/**

📒 Files selected for processing (2)

• .github/workflows/build-test-deploy.yml
• .github/workflows/label-merge-conflict.yml

---

Walkthrough

Two GitHub Actions workflow files are updated to pin external actions to specific commit hashes instead of using semantic version tags. The shimataro/ssh-key-action is pinned to commit 6b84f2e793b32fa0b03a379cadadec75cc539391 (v2.8.0), and eps1lon/actions-label-merge-conflict is pinned to a specific commit. No behavioral or functional changes are introduced.

Changes

Cohort / File(s)	Summary
GitHub Actions Workflow Updates .github/workflows/build-test-deploy.yml, .github/workflows/label-merge-conflict.yml	Pinned external GitHub Actions to specific commit hashes instead of semantic version tags to ensure reproducible and secure workflow execution.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 minutes

Possibly related PRs

• [#1735] Pin GHA digests via Renovate. #1828: Both PRs address pinning of GitHub Actions; this PR manually pins specific action commits while the referenced PR enables Renovate to automatically manage and pin GHA digests.

Poem

🐰 A rabbit hops through workflows so fine,
Pinning each action to commit's design,
No drift, no surprise, just certainty's grace,
Each step now locked in its rightful place! 🔐

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main changes: pinning GitHub Actions that were previously missed by Renovate, which is reflected in both updated workflow files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch feature/fix-shimataro-ssh-not-updating

📝 Coding Plan

• Generate coding plan for human review comments

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

Code Coverage Report:
  2026-03-12 23:26:03

 Summary:
  Classes: 100.00% (1/1)
  Methods: 100.00% (2/2)
  Lines:   100.00% (189/189)

Drupal\ys_demo\Plugin\Block\CounterBlock
  Methods: 100.00% ( 2/ 2)   Lines: 100.00% ( 10/ 10)

[AlexSkrypnyk]

Code Coverage Report:
  2026-03-12 23:26:29

 Summary:
  Classes: 100.00% (1/1)
  Methods: 100.00% (2/2)
  Lines:   100.00% (189/189)

Drupal\ys_demo\Plugin\Block\CounterBlock
  Methods: 100.00% ( 2/ 2)   Lines: 100.00% ( 10/ 10)

[AlexSkrypnyk]

Code Coverage Report:
  2026-03-12 23:30:13

 Summary:
  Classes: 100.00% (1/1)
  Methods: 100.00% (2/2)
  Lines:   100.00% (189/189)

Drupal\ys_demo\Plugin\Block\CounterBlock
  Methods: 100.00% ( 2/ 2)   Lines: 100.00% ( 10/ 10)

[AlexSkrypnyk]

Code Coverage Report:
  2026-03-12 23:30:36

 Summary:
  Classes: 100.00% (1/1)
  Methods: 100.00% (2/2)
  Lines:   100.00% (189/189)

Drupal\ys_demo\Plugin\Block\CounterBlock
  Methods: 100.00% ( 2/ 2)   Lines: 100.00% ( 10/ 10)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 78.91%. Comparing base (e7e8ad8) to head (70bc5be).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2375      +/-   ##
==========================================
- Coverage   79.40%   78.91%   -0.49%     
==========================================
  Files         125      118       -7     
  Lines        6680     6521     -159     
  Branches       44        0      -44     
==========================================
- Hits         5304     5146     -158     
+ Misses       1376     1375       -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.