From a07fe2047a5cc8d8d59b2caaf92058c41dd193a8 Mon Sep 17 00:00:00 2001 From: Joshua Temple Date: Mon, 6 Jul 2026 04:17:09 -0400 Subject: [PATCH 1/2] test: bump actions/create-github-app-token pin to exercise the self-heal reconcile companion Signed-off-by: Joshua Temple --- .github/workflows/action-pins.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/action-pins.yml b/.github/workflows/action-pins.yml index 8ff2d94b..d618632c 100644 --- a/.github/workflows/action-pins.yml +++ b/.github/workflows/action-pins.yml @@ -54,7 +54,7 @@ jobs: - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: path: . - - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 + - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1 with: app-id: '0' private-key: '' From 79a178e3a0f8587129ebc039429628889c5fe9c5 Mon Sep 17 00:00:00 2001 From: cascade-bot Date: Mon, 6 Jul 2026 08:58:01 +0000 Subject: [PATCH 2/2] ci: reconcile governed action pins Signed-off-by: cascade-bot --- .github/workflows/orchestrate.yaml | 2 +- internal/generate/action_pins.yaml | 60 +++++++++++++++++++++++++----- 2 files changed, 51 insertions(+), 11 deletions(-) diff --git a/.github/workflows/orchestrate.yaml b/.github/workflows/orchestrate.yaml index 50b074aa..22158766 100644 --- a/.github/workflows/orchestrate.yaml +++ b/.github/workflows/orchestrate.yaml @@ -1,5 +1,5 @@ # AUTO-GENERATED by cascade - DO NOT EDIT MANUALLY -# Regenerate with: cascade generate-workflow --config .github/manifest.yaml +# Regenerate with: cascade generate-workflow --config /home/runner/work/cascade/cascade/.github/manifest.yaml name: Orchestrate CI/CD diff --git a/internal/generate/action_pins.yaml b/internal/generate/action_pins.yaml index 04b6a360..c71466ca 100644 --- a/internal/generate/action_pins.yaml +++ b/internal/generate/action_pins.yaml @@ -10,13 +10,53 @@ # sha is the 40-hex commit the tag/version resolves to. version is the precise # release the sha corresponds to, carried as the trailing uses: comment. actions: - actions/checkout: { tag: v7, sha: 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0, version: v7.0.0, emit: true } - actions/github-script: { tag: v9, sha: 3a2844b7e9c422d3c10d287c895573f7108da1b3, version: v9.0.0, emit: true } - actions/download-artifact: { tag: v8, sha: 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c, version: v8.0.1, emit: true } - actions/upload-artifact: { tag: v7, sha: 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a, version: v7.0.1, emit: true } - actions/create-github-app-token: { tag: v3, sha: bcd2ba49218906704ab6c1aa796996da409d3eb1, version: v3.2.0, emit: true } - actions/cache: { tag: v6, sha: 55cc8345863c7cc4c66a329aec7e433d2d1c52a9, version: v6.1.0, emit: false } - actions/setup-go: { tag: v6, sha: 924ae3a1cded613372ab5595356fb5720e22ba16, version: v6.5.0, emit: false } - actions/setup-node: { tag: v6, sha: 48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e, version: v6.4.0, emit: false } - actions/upload-pages-artifact: { tag: v5, sha: fc324d3547104276b827a68afc52ff2a11cc49c9, version: v5.0.0, emit: false } - actions/deploy-pages: { tag: v5, sha: cd2ce8fcbc39b97be8ca5fce6e763baed58fa128, version: v5.0.0, emit: false } + actions/cache: + tag: v6 + sha: 55cc8345863c7cc4c66a329aec7e433d2d1c52a9 + version: v6.1.0 + emit: false + actions/checkout: + tag: v7 + sha: 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 + version: v7.0.0 + emit: true + actions/create-github-app-token: + tag: v3 + sha: 1b10c78c7865c340bc4f6099eb2f838309f1e8c3 + version: v3.1.1 + emit: true + actions/deploy-pages: + tag: v5 + sha: cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 + version: v5.0.0 + emit: false + actions/download-artifact: + tag: v8 + sha: 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c + version: v8.0.1 + emit: true + actions/github-script: + tag: v9 + sha: 3a2844b7e9c422d3c10d287c895573f7108da1b3 + version: v9.0.0 + emit: true + actions/setup-go: + tag: v6 + sha: 924ae3a1cded613372ab5595356fb5720e22ba16 + version: v6.5.0 + emit: false + actions/setup-node: + tag: v6 + sha: 48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e + version: v6.4.0 + emit: false + actions/upload-artifact: + tag: v7 + sha: 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a + version: v7.0.1 + emit: true + actions/upload-pages-artifact: + tag: v5 + sha: fc324d3547104276b827a68afc52ff2a11cc49c9 + version: v5.0.0 + emit: false