Skip to content

chore(ci): refresh stale actions lock entries - #629

Merged
hyperpolymath merged 1 commit into
mainfrom
fix/actions-lock-stale
Aug 24, 2026
Merged

chore(ci): refresh stale actions lock entries#629
hyperpolymath merged 1 commit into
mainfrom
fix/actions-lock-stale

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Refreshes the generated Actions lockfile with the repository’s guarded canonical updater. No authored workflow file changes.

The authoritative verifier previously reported exactly three stale entries across three workflows. This refresh records:

  • ocaml/setup-ocaml v3.7.2
  • github/codeql-action v4.37.8 in the CodeQL and Hypatia reusable workflows

Validation:

  • bash scripts/update-actions-lock.sh --verify-local — all 40 workflows covered
  • bash scripts/tests/actions-lock-update-test.sh — preservation, idempotence, and rollback controls pass
  • just validate
  • git diff --check

The remaining 20 bare-SHA/no-tag notices are advisory; direct authored workflow SHA pins remain intentionally preserved.

@sonarqubecloud

Copy link
Copy Markdown

@gitar-bot

gitar-bot Bot commented Aug 24, 2026

Copy link
Copy Markdown

Important

You are using the Gitar free plan. Upgrade to unlock code review, CI analysis, auto-apply, custom automations, and more.

Gitar

@hyperpolymath
hyperpolymath merged commit 6fd7760 into main Aug 24, 2026
33 of 36 checks passed
@hyperpolymath
hyperpolymath deleted the fix/actions-lock-stale branch August 24, 2026 20:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant