Skip to content

Conversation

@ryoppippi
Copy link
Member

@ryoppippi ryoppippi commented Sep 8, 2025

Summary by cubic

Pinned GitHub Actions to specific SHAs and bumped versions to improve CI security and consistency.

  • Dependencies
    • astral-sh/setup-uv: v6.4.3 → v6.6.1 (docs, lint, release, test workflows)
    • astral-sh/ruff-action: v3.5.0 → v3.5.1 (lint workflow)

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This pull request updates GitHub Actions dependencies by pinning them to specific commit hashes and updating to newer versions for improved security and stability.

  • Updates astral-sh/setup-uv from v6.4.3 to v6.6.1 across all workflows
  • Updates astral-sh/ruff-action from v3.5.0 to v3.5.1 in the lint workflow

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File Description
.github/workflows/test.yml Updates setup-uv action to v6.6.1 for test workflow
.github/workflows/release.yml Updates setup-uv action to v6.6.1 for release workflow
.github/workflows/lint.yml Updates setup-uv action to v6.6.1 and ruff-action to v3.5.1
.github/workflows/docs.yml Updates setup-uv action to v6.6.1 for documentation workflow

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

Copy link

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 4 files

Copy link
Contributor

@glebedel glebedel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@ryoppippi ryoppippi merged commit d94096b into main Sep 12, 2025
6 checks passed
@ryoppippi ryoppippi deleted the pin-gha branch September 12, 2025 16:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants