From 5f48a7312b8733de308010a4ab0d01f8692f76fb Mon Sep 17 00:00:00 2001 From: unional Date: Wed, 12 Aug 2026 23:28:28 -0700 Subject: [PATCH] chore(ci): pin the shared workflows to @v1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit repobuddy/.github is now tagged. Pinning @main meant every change there reached this repo the instant it merged — which is how an auto-merged changesets/action v1 -> v2 bump (repobuddy/.github#42) broke this repo's release path without anyone touching it. Two lines exist there, because changesets/action and @changesets/cli are a matched pair the action validates at runtime: v1 -> changesets/action@v1 -> @changesets/cli v2 v2 -> changesets/action@v2 -> @changesets/cli v3 This repo is on @changesets/cli ^2.29.8, so it belongs on @v1. Move to @v2 only together with a CLI v3 upgrade here. Pins the composite action refs too, so the pin actually isolates this repo instead of leaking back to @main through setup-playwright. Refs: https://github.com/repobuddy/.github/issues/43 Co-Authored-By: Claude Opus 5 --- .github/workflows/github-page.yml | 2 +- .github/workflows/pull-request.yml | 2 +- .github/workflows/release.yml | 6 +++--- .github/workflows/update-snapshot.yml | 2 +- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/github-page.yml b/.github/workflows/github-page.yml index cee36d081..ac76fbcb3 100644 --- a/.github/workflows/github-page.yml +++ b/.github/workflows/github-page.yml @@ -5,6 +5,6 @@ jobs: docgen: permissions: contents: write - uses: repobuddy/.github/.github/workflows/pnpm-docs.yml@main + uses: repobuddy/.github/.github/workflows/pnpm-docs.yml@v1 with: publish-dir: ./packages/storybook-addon-vis/storybook-static \ No newline at end of file diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml index c8300a1fa..991a59b89 100644 --- a/.github/workflows/pull-request.yml +++ b/.github/workflows/pull-request.yml @@ -47,7 +47,7 @@ jobs: run: pnpm install - name: Install playwright browsers - uses: repobuddy/.github/.github/actions/setup-playwright@main + uses: repobuddy/.github/.github/actions/setup-playwright@v1 - name: Verify uses: nick-fields/retry@v4 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 059b292ca..0c2d0d564 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -34,7 +34,7 @@ jobs: run: pnpm install - name: Install playwright browsers - uses: repobuddy/.github/.github/actions/setup-playwright@main + uses: repobuddy/.github/.github/actions/setup-playwright@v1 - name: Verify uses: nick-fields/retry@v4 @@ -53,14 +53,14 @@ jobs: */*/__vis__/**/__results__ release: - uses: repobuddy/.github/.github/workflows/pnpm-release-changeset.yml@main + uses: repobuddy/.github/.github/workflows/pnpm-release-changeset.yml@v1 needs: verify secrets: inherit docgen: permissions: contents: write - uses: repobuddy/.github/.github/workflows/pnpm-docs.yml@main + uses: repobuddy/.github/.github/workflows/pnpm-docs.yml@v1 needs: release if: github.ref == 'refs/heads/main' && needs.release.outputs.published == 'true' with: diff --git a/.github/workflows/update-snapshot.yml b/.github/workflows/update-snapshot.yml index a16236291..6f19cff9e 100644 --- a/.github/workflows/update-snapshot.yml +++ b/.github/workflows/update-snapshot.yml @@ -34,7 +34,7 @@ jobs: run: pnpm install - name: Install playwright browsers - uses: repobuddy/.github/.github/actions/setup-playwright@main + uses: repobuddy/.github/.github/actions/setup-playwright@v1 - run: ${{ inputs.build-command }} - run: ${{ inputs.update-snapshot-command }}