chore(deps): add Renovate rule for org workflow SHA pin updates#31
chore(deps): add Renovate rule for org workflow SHA pin updates#31williaby wants to merge 1 commit into
Conversation
CI-056 compliance: adds followTag rule for ByronWilliamsCPA/.github packages so Renovate keeps SHA pins current after each release. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
Warning Rate limit exceeded
You’ve run out of usage credits. Purchase more in the billing tab. ⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.Scanned FilesNone |
|
There was a problem hiding this comment.
Pull request overview
Adds a Renovate package rule intended to keep org-level reusable workflow references on a floating v1 tag while still receiving digest/SHA pin updates, aligning with the repo’s existing practice of pinning GitHub Actions to SHAs.
Changes:
- Reformats
renovate.json(whitespace/indentation). - Adds a new
packageRulesentry to trackByronWilliamsCPA/.githubandwilliaby/.githubwithfollowTag: "v1".
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "matchManagers": [ | ||
| "github-actions" | ||
| ], | ||
| "matchPackagePatterns": [ |
| "description": "Track org workflow floating v1 tag for SHA pin updates", | ||
| "matchManagers": [ | ||
| "github-actions" | ||
| ], | ||
| "matchPackagePatterns": [ | ||
| "ByronWilliamsCPA/.github", | ||
| "williaby/.github" | ||
| ], | ||
| "versioning": "semver", | ||
| "followTag": "v1" | ||
| } |
@/tmp/tmphzur4xjm/pr-body.txt