ci: pin GitHub Actions to commit SHAs - #7

Merged

rivernate merged 9 commits into

mainfrom

pin-actions-to-sha

Aug 24, 2026

Commits on Aug 21, 2026

ci: pin GitHub Actions to commit SHAs
rivernate
committed
d71c349
fix: add dependabot.yml with a github-actions ecosystem entry
rivernate
committed
71068f8
fix: preserve composite-action subpath when pinning to SHA
rivernate
committed
1ea221e
fix: sequence the two bazel builds in build_protoc_plugin instead of racing them
rivernate
committed
a871e50
fix: symlink ../closure-library to the npm-installed location before closure-compiler runs
rivernate
committed
22d41b4
fix: use goog:namespace imports instead of raw closure-library paths
rivernate
committed
96ab974
fix: use goog:namespace imports in commonjs/export_testdeps.js too
rivernate
committed
5c95bf4

Commits on Aug 24, 2026

fix: address review feedback on export_testdeps.js and gulpfile symlink
rivernate
committed
907e2a3
fix: never rm a real ../closure-library, and repair dangling links

rivernate
and
claude
committed
7f6b771