Pin softprops/action-gh-release

aivus · aivus · commit f4ea8f0666b9 · 2025-10-31T20:02:38.000+01:00
diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml
@@ -1,4 +1,4 @@
-name: Dependabot auto-merge
+name: Dependabot puppeteer auto-merge
 
 on: pull_request
 
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -64,7 +64,7 @@ jobs:
         run: npm publish --provenance --access=public
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1
         with:
           tag_name: ${{ steps.bump-version.outputs.tag }}
           generate_release_notes: true

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-name: Dependabot auto-merge`
	`1`	`+name: Dependabot puppeteer auto-merge`
`2`	`2`
`3`	`3`	`on: pull_request`
`4`	`4`