From c3149c57ff66c6d4770808a9baaa5ba2e72d30e4 Mon Sep 17 00:00:00 2001 From: Skiipy11 Date: Tue, 21 Jul 2026 15:11:33 +0000 Subject: [PATCH] chore(ci): pin actions/setup-node to immutable SHA Replace mutable @v5 tags in ci.yml and publish.yml (publish carries NPM_TOKEN + id-token:write). Renovate helpers:pinGitHubActionDigests owns future digest updates. --- .github/workflows/ci.yml | 2 +- .github/workflows/publish.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e5f9908..0785387 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -18,7 +18,7 @@ jobs: with: persist-credentials: false - - uses: actions/setup-node@v5 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5 with: node-version: ${{ matrix.node-version }} diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index c5d6991..d26e7c9 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -18,7 +18,7 @@ jobs: with: persist-credentials: false - - uses: actions/setup-node@v5 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5 with: node-version: 20 registry-url: https://registry.npmjs.org