From e526fdbb58f09df4daae8bf25d810eb41d281886 Mon Sep 17 00:00:00 2001 From: Claude Date: Wed, 24 Jun 2026 10:39:35 +0000 Subject: [PATCH 1/2] ci: pin GitHub Actions to commit SHA --- .github/workflows/ci.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 0bd9fc7a1..f8189081f 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -9,11 +9,11 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: fetch-depth: 0 - name: Setup Node - uses: actions/setup-node@v3 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version-file: .nvmrc cache: "npm" From 7bc85fbb8959f207ba5bf3e6091889f405c8bdf8 Mon Sep 17 00:00:00 2001 From: Claude Date: Wed, 24 Jun 2026 10:49:04 +0000 Subject: [PATCH 2/2] ci: pin actions to SHA in remaining workflows Co-Authored-By: Claude Opus 4.8 (1M context) Claude-Session: https://claude.ai/code/session_01DXXPnGepYUGie3we1X9PTR --- .github/workflows/release.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 16612a774..ece9a3ac4 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -12,12 +12,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5 - name: Get the version id: get_version run: echo "version=$(jq -Mr '.version' < lerna.json)" >> $GITHUB_OUTPUT - name: Setup Node - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5 with: node-version-file: .nvmrc cache: "npm"