From 653a2c9ad411bca7502cc3b5604e218b0fd98bbc Mon Sep 17 00:00:00 2001 From: Brandon Harvey <8107750+bharvey88@users.noreply.github.com> Date: Fri, 24 Jul 2026 11:02:38 -0500 Subject: [PATCH 1/2] Pin the label-check reusable workflow to a commit SHA MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit label-check.yml consumed ApolloAutomation/Workflows label-check via the mutable @main ref, so a change in the Workflows repo silently changed what ran here. Pin it to the current reviewed commit, matching how the repo already pins third-party actions and mirroring the AIR-1 fix (AIR-1 #118). Trade-off: future Workflows updates need a pin bump in this repo. 🤖 Generated with [Claude Code](https://claude.com/claude-code) --- .github/workflows/label-check.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/label-check.yml b/.github/workflows/label-check.yml index 96a9751..9315e38 100644 --- a/.github/workflows/label-check.yml +++ b/.github/workflows/label-check.yml @@ -17,4 +17,4 @@ permissions: jobs: label-check: name: Label Check - uses: ApolloAutomation/Workflows/.github/workflows/label-check.yml@main + uses: ApolloAutomation/Workflows/.github/workflows/label-check.yml@430d90dc695c6f7d1075c4e4a0df4b13a6496252 # main 2026-07-23 From a7d428dd94eed90fef460989f2445a0b578e4e5f Mon Sep 17 00:00:00 2001 From: Brandon Harvey <8107750+bharvey88@users.noreply.github.com> Date: Fri, 24 Jul 2026 11:04:20 -0500 Subject: [PATCH 2/2] Pin the build reusable workflow to a commit SHA MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit build.yml consumed ApolloAutomation/Workflows build via the mutable @main ref, the last remaining unpinned Workflows reference on beta. Pin it to the current reviewed commit, matching the label-check pin in this PR and how the repo already pins third-party actions. This completes pinning the full set of Workflows references on beta. Trade-off: future Workflows updates need a pin bump in this repo. 🤖 Generated with [Claude Code](https://claude.com/claude-code) --- .github/workflows/build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 53e9c7d..b3394a6 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -16,7 +16,7 @@ on: jobs: build-and-publish: - uses: ApolloAutomation/Workflows/.github/workflows/build.yml@main + uses: ApolloAutomation/Workflows/.github/workflows/build.yml@430d90dc695c6f7d1075c4e4a0df4b13a6496252 # main 2026-07-23 permissions: contents: write pages: write