From df189807b34014181141012747a1b34f133a5031 Mon Sep 17 00:00:00 2001 From: Rostislav Rotaru Date: Sat, 14 Nov 2026 18:58:22 -0800 Subject: [PATCH] Move the pins on .github's workflows to v2.32.0 Agent: DEV3 (developer) Agent-Model: Anthropic Opus 5.5, Medium --- .github/workflows/build-and-test.yml | 2 +- .github/workflows/flake-proof.yml | 4 ++-- .github/workflows/git-builds.yml | 2 +- .github/workflows/release-npm.yml | 4 ++-- .github/workflows/relock.yml | 2 +- .github/workflows/require-linked-issue.yml | 2 +- README.md | 2 +- 7 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/build-and-test.yml b/.github/workflows/build-and-test.yml index 10fe87f..c439651 100644 --- a/.github/workflows/build-and-test.yml +++ b/.github/workflows/build-and-test.yml @@ -24,7 +24,7 @@ concurrency: jobs: build-and-test: name: Build and test - uses: noldova-com/.github/.github/workflows/build-and-test.yml@30b685b9aa02d232a043f7ed5335b6746463e3fa # v2.30.0 + uses: noldova-com/.github/.github/workflows/build-and-test.yml@5328d6b67990d5c1dd955f55e666d72de05a0b2a # v2.32.0 permissions: contents: read packages: read diff --git a/.github/workflows/flake-proof.yml b/.github/workflows/flake-proof.yml index 1574368..45dedbb 100644 --- a/.github/workflows/flake-proof.yml +++ b/.github/workflows/flake-proof.yml @@ -40,7 +40,7 @@ permissions: {} jobs: versions: name: Versions - uses: noldova-com/.github/.github/workflows/versions.yml@30b685b9aa02d232a043f7ed5335b6746463e3fa # v2.30.0 + uses: noldova-com/.github/.github/workflows/versions.yml@5328d6b67990d5c1dd955f55e666d72de05a0b2a # v2.32.0 permissions: {} group: @@ -70,7 +70,7 @@ jobs: concurrency: group: ${{ github.workflow }}-${{ inputs.ref || github.ref_name }}-${{ needs.group.outputs.filter }} cancel-in-progress: false - uses: noldova-com/.github/.github/workflows/flake-proof.yml@30b685b9aa02d232a043f7ed5335b6746463e3fa # v2.30.0 + uses: noldova-com/.github/.github/workflows/flake-proof.yml@5328d6b67990d5c1dd955f55e666d72de05a0b2a # v2.32.0 permissions: contents: read packages: read diff --git a/.github/workflows/git-builds.yml b/.github/workflows/git-builds.yml index fee0d8d..f671494 100644 --- a/.github/workflows/git-builds.yml +++ b/.github/workflows/git-builds.yml @@ -26,7 +26,7 @@ defaults: jobs: versions: name: Versions - uses: noldova-com/.github/.github/workflows/versions.yml@30b685b9aa02d232a043f7ed5335b6746463e3fa # v2.30.0 + uses: noldova-com/.github/.github/workflows/versions.yml@5328d6b67990d5c1dd955f55e666d72de05a0b2a # v2.32.0 permissions: {} check: diff --git a/.github/workflows/release-npm.yml b/.github/workflows/release-npm.yml index cf2861f..e887eff 100644 --- a/.github/workflows/release-npm.yml +++ b/.github/workflows/release-npm.yml @@ -26,7 +26,7 @@ concurrency: jobs: release: - uses: noldova-com/.github/.github/workflows/release-npm.yml@30b685b9aa02d232a043f7ed5335b6746463e3fa # v2.30.0 + uses: noldova-com/.github/.github/workflows/release-npm.yml@5328d6b67990d5c1dd955f55e666d72de05a0b2a # v2.32.0 permissions: contents: write packages: write @@ -40,7 +40,7 @@ jobs: dependents: needs: release - uses: noldova-com/.github/.github/workflows/update-dependents.yml@30b685b9aa02d232a043f7ed5335b6746463e3fa # v2.30.0 + uses: noldova-com/.github/.github/workflows/update-dependents.yml@5328d6b67990d5c1dd955f55e666d72de05a0b2a # v2.32.0 permissions: contents: read packages: read diff --git a/.github/workflows/relock.yml b/.github/workflows/relock.yml index 64429e4..26ae73b 100644 --- a/.github/workflows/relock.yml +++ b/.github/workflows/relock.yml @@ -23,7 +23,7 @@ permissions: {} jobs: relock: name: Relock - uses: noldova-com/.github/.github/workflows/relock-dependent.yml@30b685b9aa02d232a043f7ed5335b6746463e3fa # v2.30.0 + uses: noldova-com/.github/.github/workflows/relock-dependent.yml@5328d6b67990d5c1dd955f55e666d72de05a0b2a # v2.32.0 permissions: contents: read packages: read diff --git a/.github/workflows/require-linked-issue.yml b/.github/workflows/require-linked-issue.yml index 593a258..a05310f 100644 --- a/.github/workflows/require-linked-issue.yml +++ b/.github/workflows/require-linked-issue.yml @@ -18,4 +18,4 @@ permissions: jobs: check: name: Check - uses: noldova-com/.github/.github/workflows/linked-issue.yml@30b685b9aa02d232a043f7ed5335b6746463e3fa # v2.30.0 + uses: noldova-com/.github/.github/workflows/linked-issue.yml@5328d6b67990d5c1dd955f55e666d72de05a0b2a # v2.32.0 diff --git a/README.md b/README.md index 3657a7c..da53838 100644 --- a/README.md +++ b/README.md @@ -194,7 +194,7 @@ Every pull request into `main` must pass "Check / Linked issue" and "Build and t That test runs in a describe of its own, after the others, since the mock sees every bigint stats object of its process; it changes no production code. - One spy on Noldova Desktop's `OwnedProcess.stopAsync`, through `mock.method` with no implementation of its own, so the real method runs, in `git-runner.test.ts` and `git-process.test.ts`, counts the stops that cat-file's idle limit and the wait for a command's end ask for: asking for the stop is what the limit changes at once, while the process exits later, so a test checks the count a millisecond before the limit and at it; it changes no production code. - One test gives a rollback, through the stager `RestoreRollback`'s constructor takes, a `BlobStager` that stages for real and then removes the staged files, `RemovedOnceStaged` in `restore-rollback.test.ts`: it stands in for another program that removes them between the staging and the rollback, a gap the module does nothing in that a test could wait on. -- `.github/workflows/build-and-test.yml` calls the organization's shared `build-and-test.yml`, v2.30.0, with `publishes: true`, on GitHub-hosted runners, as the `.github` repository's README describes it. +- `.github/workflows/build-and-test.yml` calls the organization's shared `build-and-test.yml`, v2.32.0, with `publishes: true`, on GitHub-hosted runners, as the `.github` repository's README describes it. Each target's job builds, checks the toolchain, Node.js 24.21.0 with npm 11.19.0, and the line endings, `* text=auto eol=lf` in `.gitattributes` and LF only with exactly one final newline in every tracked text file, then runs `npm run test -- --skip-test-details --skip-coverage-details` and checks that the build and the tests changed no tracked file. On Linux x64 it also builds a second time and checks that the archives are the same, byte for byte, and on every target it checks the archives as the release does, with `pipelines archive`: each archive's name, version, `gitHead`, scope and licence, and a byte-for-byte copy of every file `--list-copies` lists. - Every pull request, draft or ready, runs Linux and Windows x64 and macOS arm64, and every push to `main` and every run started by hand every target: Linux, Windows and macOS, each on x64 and ARM64.