Skip to content

chore: pin GitHub Actions to commit SHAs and enable dependabot - #179

Merged
Yury Semikhatsky (yury-s) merged 1 commit into
microsoft:mainfrom
dgozman:pin-github-actions
Aug 26, 2026
Merged

chore: pin GitHub Actions to commit SHAs and enable dependabot#179
Yury Semikhatsky (yury-s) merged 1 commit into
microsoft:mainfrom
dgozman:pin-github-actions

Conversation

@dgozman

@dgozmanDmitry Gozman (dgozman) commented Aug 26, 2026

Copy link
Copy Markdown
Contributor
  • Pin actions/checkout and actions/setup-node to commit SHAs in ci.yml and publish.yml.
  • Add .github/dependabot.yml: weekly grouped github-actions updates with a 7-day cooldown.
    Same as Pin GitHub Actions to full-length commit SHAs #177, but pinning newer action versions, aligning with the playwright repo.

Aligns with the playwright repo: pin `actions/checkout` and
`actions/setup-node` to full commit SHAs, and add a dependabot config
that groups github-actions updates weekly with a 7-day cooldown.
Same as microsoft#177, but pinning newer action versions
(checkout v7.0.1, setup-node v6.5.0).
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DK7UTcz4cTyt6mtnXfjGzS
@yury-s
Yury Semikhatsky (yury-s) merged commit 6436296 into microsoft:mainAug 26, 2026
13 checks passed
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@dgozman@yury-s