Skip to content

Pin release workflow GitHub Actions#334

Merged
foxish merged 3 commits into
mainfrom
cursor/pin-github-actions-cli-ef9f
May 26, 2026
Merged

Pin release workflow GitHub Actions#334
foxish merged 3 commits into
mainfrom
cursor/pin-github-actions-cli-ef9f

Conversation

@foxish
Copy link
Copy Markdown
Member

@foxish foxish commented May 26, 2026

Summary

  • Pin release workflow GitHub Actions to full commit SHAs with trailing version comments
  • Add Dependabot configuration for the github-actions ecosystem

Testing

  • python3 -c 'import yaml; [yaml.safe_load(open(p)) for p in (".github/workflows/release.yaml", ".github/dependabot.yml")]; print("yaml ok")'
  • python3 -c 'import re, pathlib, sys; text=pathlib.Path(".github/workflows/release.yaml").read_text(); refs=re.findall(r"uses:\\s+([^\\s#]+)", text); bad=[r for r in refs if not re.search(r"@[0-9a-f]{40}$", r)]; print("refs="+", ".join(refs)); sys.exit(1 if bad else 0)'
  • go run github.com/rhysd/actionlint/cmd/actionlint@latest .github/workflows/release.yaml
  • Remote tag-to-SHA verification with git ls-remote

Linear Issue: ENG-921

Open in Web Open in Cursor 

Co-authored-by: Anirudh Ramanathan <anirudh@foxish.me>
@foxish foxish marked this pull request as ready for review May 26, 2026 18:17
cursoragent and others added 2 commits May 26, 2026 18:18
Co-authored-by: Anirudh Ramanathan <anirudh@foxish.me>
Co-authored-by: Anirudh Ramanathan <anirudh@foxish.me>
Copy link
Copy Markdown
Contributor

@daniel-de-vera daniel-de-vera left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@foxish foxish merged commit 2f84d8e into main May 26, 2026
1 check passed
@foxish foxish deleted the cursor/pin-github-actions-cli-ef9f branch May 26, 2026 20:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants