Skip to content

Lock workflow action dependencies with actions.lock - #763

Merged
rgarcia merged 1 commit into
mainfrom
hypeship/actions-lockfile
Nov 13, 2026
Merged

rgarcia merged 1 commit into
mainfrom
hypeship/actions-lockfile

Conversation

@rgarcia

@rgarcia rgarcia commented Nov 13, 2026

Copy link
Copy Markdown
Contributor

Description

Adds GitHub's workflow dependency lockfile. .github/workflows/actions.lock records the commit behind every action the workflows use, so a moved tag on a third-party action can't change what runs in CI.

  • .github/workflows/actions.lock was generated with gh actions-lock, not edited by hand. gh actions-lock --verify passes (1 workflow valid).
  • broken-links.yml: actions/checkout@v4 and actions/setup-node@v4 narrowed to v4.4.0. Only uses: lines change.

Testing

CI-only change; no docs content touched.

@mintlify

mintlify Bot commented Nov 13, 2026 •

Copy link
Copy Markdown
Contributor

Preview deployment for your docs. Learn more about Mintlify Previews.

Project Status Preview Updated
Kernel 🟢 Ready View Preview Nov 13, 2026, 9:10 PM

💡 Tip: Enable Automations to automatically generate PRs for you.

@rgarcia
rgarcia merged commit f7e14cd into main Nov 13, 2026
3 checks passed
@rgarcia
rgarcia deleted the hypeship/actions-lockfile branch November 13, 2026 21:25

This branch was successfully deployed

1 active deployment
staging — 9a032a49 Deployed Nov 13, 2026 by mintlify[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants