From cebf6745a648c1de84150126c9cf314b247e6229 Mon Sep 17 00:00:00 2001 From: Altay Date: Mon, 5 Oct 2026 14:34:44 +0300 Subject: [PATCH] ci: keep every pending release in the queue Pin the shared npm release workflow to putdotio/.github v2.0.0, whose release job uses queue: max, so a late older release no longer replaces a newer pending one and then skips. Inputs, secrets and permissions are unchanged from aebc5c2. The links and scan actions move to the same tag; on Linux the only change is Zizmor 1.29.0 to 1.30.1. --- .github/workflows/ci.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 5a155a5..e247595 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -42,11 +42,11 @@ jobs: run: vp run verify - name: Check Markdown links - uses: putdotio/.github/.github/actions/links@c1830f7938b7dc98f085082e988d3c46437bb15c # v1.2.0 + uses: putdotio/.github/.github/actions/links@df7b05db247b9a2c0c6d9aa460353fd1ab4dd744 # v2.0.0 - name: Scan secrets and workflows if: ${{ !cancelled() }} - uses: putdotio/.github/.github/actions/scan@c1830f7938b7dc98f085082e988d3c46437bb15c # v1.2.0 + uses: putdotio/.github/.github/actions/scan@df7b05db247b9a2c0c6d9aa460353fd1ab4dd744 # v2.0.0 release: if: github.event_name == 'push' && github.ref == 'refs/heads/main' && !contains(github.event.head_commit.message, '[skip ci]') @@ -55,6 +55,6 @@ jobs: permissions: contents: read id-token: write - uses: putdotio/.github/.github/workflows/frontend-release-npm.yml@aebc5c2313cce5d667477d1a48d30a6f2eb4bc31 # putio-ci credential rename + uses: putdotio/.github/.github/workflows/frontend-release-npm.yml@df7b05db247b9a2c0c6d9aa460353fd1ab4dd744 # v2.0.0 secrets: PUTIO_CI_APP_PRIVATE_KEY: ${{ secrets.PUTIO_CI_APP_PRIVATE_KEY }}