Skip to content

fix: align all workflow actions with org allowlist#59

Merged
sinduri-g merged 4 commits into
mainfrom
fix/github-actions-allowlist
May 27, 2026
Merged

fix: align all workflow actions with org allowlist#59
sinduri-g merged 4 commits into
mainfrom
fix/github-actions-allowlist

Conversation

@sinduri-g
Copy link
Copy Markdown
Contributor

  • Pin actions/checkout and actions/setup-node to @v4 across all six workflow files (deploy, preview, new-adventure, new-level, refresh-community-data, validate-adventures)
  • Replace peter-evans/create-pull-request@v6 in new-adventure and new-level with native git + gh CLI steps
  • Update README.md to remove the peter-evans reference
  • Add a GitHub Actions allowlist section to CLAUDE.md so future AI reviews catch violations before they reach CI

- Pin actions/checkout and actions/setup-node to @v4 across all six
  workflow files (deploy, preview, new-adventure, new-level,
  refresh-community-data, validate-adventures)
- Replace peter-evans/create-pull-request@v6 in new-adventure and
  new-level with native git + gh CLI steps
- Update README.md to remove the peter-evans reference
- Add a GitHub Actions allowlist section to CLAUDE.md so future AI
  reviews catch violations before they reach CI

Signed-off-by: Sinduri Guntupalli <sinduri.guntupalli@dynatrace.com>
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 27, 2026

PR Preview Action v1.8.1
Preview removed because the pull request was closed.
2026-05-27 13:49 UTC

sinduri-g added 3 commits May 27, 2026 14:33
- Delete LinkSection (exported but never imported anywhere)
- Remove export from BRAND_SECONDARY_LINE_WORD (internal only)
- Extract TagChips component; replace 3 identical inline chip maps
  in AdventureDetail, ChallengeDetail (structured + legacy layouts)
- Extract CodespacesButton component; replace 2 identical button
  blocks (mobile CTA and desktop sidebar) in ChallengeDetail
- Simplify StructuredLayout to accept (adventure, level) directly;
  remove 10 pass-through variable declarations in ChallengeDetail

Signed-off-by: Sinduri Guntupalli <sinduri.guntupalli@dynatrace.com>
- Generate summaries.ts from YAML (id, title, month, story, tags, contributor name, level id/name/difficulty/topics/learnings only) — no imports from the full *.generated.ts files, so bundlers can keep it in its own chunk separate from walkthrough steps, toolbox items, architecture diagrams, and other detail-page fields
- Add AdventureLevelSummary, AdventureCardSummary, and RelatedLevelSummary types to types.ts; re-export them from index.ts
- Switch AdventureCard, FilteredLevelCard, and ChallengesGrid to import from summaries.ts; pages and components that need full adventure data continue to import from index.ts
- Add font preloads to root.tsx via the links() export (inter-latin-400/500, syne-latin-700); font-display: optional requires preloads to keep fonts visible on throttled connections
- Add vendor-react manual chunk to vite.config.ts to isolate React/ReactDOM/scheduler into a long-lived cacheable chunk
- Remove btn-primary idle pulse glow (ctaGlow keyframes) and btn-ghost hover glow; remove bg-primary/10 hover fill from btn-ghost; clean up corresponding light mode overrides
- Add fetchPriority="low" to the non-LCP light-mode logo in Navbar
- Update tests, styleguide.md, and CLAUDE.md to document the summaries.ts pattern

Signed-off-by: Sinduri Guntupalli <sinduri.guntupalli@dynatrace.com>
- Light logo is the LCP candidate for light mode users; low priority
  was delaying its fetch while the hidden dark logo was fetched first.
- Both SVGs are tiny so fetching both at high priority has no
  meaningful performance cost.

Signed-off-by: Sinduri Guntupalli <sinduri.guntupalli@dynatrace.com>
@sinduri-g sinduri-g merged commit 69a558a into main May 27, 2026
3 checks passed
@sinduri-g sinduri-g deleted the fix/github-actions-allowlist branch May 27, 2026 13:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant