feat(server): Add commit version significance

[Vampire]

No description provided.

[Vampire]

• feat(server): Add commit version significance #2308 👈 (View in Graphite)
• fix(server): prefetch the correct binding artifacts #2298: 2 other dependent PRs (#1602, #2309)
• test(server): add tests showing what artifacts are prefetched #2334
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[Vampire]

Still missing tests and docs, so still in Draft, but the production changes should be fine already to add the commit version significance.
You specify the normal version in the workflow script, but it writes out the commit id as version and the version as comment.

If no consistency check is done, it just runs with the old commit id.

If a consistency check it done, it fails the consistency check if the version points to another commit id, so this should only be used with concrete non-changeable versios, not with v1, but v1.2.3.

This also works properly with Renovate, as Renovate will update the commit id in the YAML and the version in the workflow script (if you configured it to do both chagnes in one PR) and it will build successfully, I tried locally.

[Vampire]

Ok, I think now it is also ready :-)

[krzema12]

Thanks for the PR! It's a good foundation for what we need, but the design doc for this feature specifies a slightly different API: https://github.com/typesafegithub/design-docs/blob/main/2025-04-27%20Enhancements%20to%20referring%20to%20actions%20by%20commit%20hash.md. So I wouldn't skip specifying commit ID if the user uses ___commit because the idea is to cross-check the version and the commit ID - they should match.

However, what you proposed in this PR is also an interesting approach. Maybe we could expose it under ___commit_infer or sth?

I'd also like to ask for adding consuming an action this way to some tests that surface how the YAML looks like, so likely to .github/workflows/end-to-end-tests.main.kts. I know the tests for ___commit_lenient are missing - my bad, they should be there.