Skip to content

ci(.github/workflows): pin GitHub Actions to commit hashes#1203

Merged
dai-shi merged 1 commit intopmndrs:mainfrom
sukvvon:ci/pin-github-actions-to-commit-hashes
Feb 10, 2026
Merged

ci(.github/workflows): pin GitHub Actions to commit hashes#1203
dai-shi merged 1 commit intopmndrs:mainfrom
sukvvon:ci/pin-github-actions-to-commit-hashes

Conversation

@sukvvon
Copy link
Contributor

@sukvvon sukvvon commented Feb 10, 2026

Related Bug Reports or Discussions

pmndrs/jotai#3235

Summary

  • Pin all GitHub Actions uses to commit hashes for supply chain security
    • Ensures reproducibility by always using the exact same commit
    • Protects against tag mutation (tags can be moved to different commits)

Check List

  • pnpm run fix for formatting and linting code and docs

@vercel
Copy link

vercel bot commented Feb 10, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
valtio Ready Ready Preview, Comment Feb 10, 2026 0:38am

Request Review

@codesandbox-ci
Copy link

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.

@pkg-pr-new
Copy link

pkg-pr-new bot commented Feb 10, 2026

More templates

npm i https://pkg.pr.new/valtio@1203

commit: 3d556f7

@dai-shi dai-shi merged commit 2622a27 into pmndrs:main Feb 10, 2026
33 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

Comments