Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/lint.yml
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ jobs:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
- uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔍 Action pin bump applied consistently; SHA/tag pairing unverifiable offline

All three actions/setup-node pins in the repo (.github/workflows/lint.yml:19, .github/workflows/release.yml:81, .github/workflows/release.yml:135) were updated to the same commit SHA with the # v6.5.0 comment, so the mechanical bump is complete — no stale pins remain. The only thing I could not verify from within the repo is that the SHA 249970729cb0ef3589644e2896645e5dc5ba9c38 actually corresponds to the upstream v6.5.0 tag; a reviewer should confirm against the upstream release before merge since the comment is the only trust anchor for the pin.

Open in Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

with:
node-version: '20'
cache: 'npm'
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -78,7 +78,7 @@ jobs:
with:
persist-credentials: false

- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
- uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
with:
node-version: '22'
cache: 'npm'
Expand Down Expand Up @@ -132,7 +132,7 @@ jobs:
with:
persist-credentials: false

- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
- uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
with:
node-version: '22'
cache: 'npm'
Expand Down
Loading