From 1167a2da7d116a2b279229ac529aeb85191a026f Mon Sep 17 00:00:00 2001 From: Stuart Mumford Date: Thu, 6 Aug 2026 09:30:47 +0100 Subject: [PATCH 1/6] another --- .github/workflows/gha-update.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/gha-update.yml b/.github/workflows/gha-update.yml index d0325ec..f7c92a5 100644 --- a/.github/workflows/gha-update.yml +++ b/.github/workflows/gha-update.yml @@ -29,13 +29,13 @@ jobs: skip_push: "true" update: "true" verify: "true" - verify_min_age: "true" # pinact run --verify-min-age + verify_min_age: "false" # Don't revert early bumps for bugs min_age: "7" - includes: | - {{ cookiecutter.package_name }}/.github/workflows/.* branch_to_tags: | ^main$ - separator: " # " + includes: | + \{\{\ cookiecutter.package_name\ \}\}/.github/workflows/** + .github/workflows/** - name: Create pull request uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1 From 99041c61abbfd68f2927606616fc457e8c5b814a Mon Sep 17 00:00:00 2001 From: Stuart Mumford Date: Thu, 6 Aug 2026 09:41:19 +0100 Subject: [PATCH 2/6] config file --- .github/workflows/gha-update.yml | 10 +--------- .pinact.yaml | 23 +++++++++++++++++++++++ 2 files changed, 24 insertions(+), 9 deletions(-) create mode 100644 .pinact.yaml diff --git a/.github/workflows/gha-update.yml b/.github/workflows/gha-update.yml index f7c92a5..699e570 100644 --- a/.github/workflows/gha-update.yml +++ b/.github/workflows/gha-update.yml @@ -27,15 +27,7 @@ jobs: - uses: suzuki-shunsuke/pinact-action@896d595f299e71d65b9d28349d6956abe144390a # v3.0.0 with: skip_push: "true" - update: "true" - verify: "true" - verify_min_age: "false" # Don't revert early bumps for bugs - min_age: "7" - branch_to_tags: | - ^main$ - includes: | - \{\{\ cookiecutter.package_name\ \}\}/.github/workflows/** - .github/workflows/** + config: .pinact.yaml - name: Create pull request uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1 diff --git a/.pinact.yaml b/.pinact.yaml new file mode 100644 index 0000000..66e9db9 --- /dev/null +++ b/.pinact.yaml @@ -0,0 +1,23 @@ +# yaml-language-server: $schema=https://raw.githubusercontent.com/suzuki-shunsuke/pinact/refs/heads/main/json-schema/pinact.json +# pinact - https://github.com/suzuki-shunsuke/pinact +version: 3 +min_age: + value: 7 # threshold in days + always: false # allow early updates +separator: " # " +files: + - pattern: .github/workflows/*.yml + - pattern: .github/workflows/*.yml + - pattern: "{{ cookiecutter.package_name }}/.github/workflows/*.yml" + +# rules: +# - ignore: true +# conditions: +# - expr: | +# ActionName == "slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml" && ActionVersion matches "v\\d+\\.\\d+\\.\\d+" +# - expr: | +# ActionRepoOwner == "suzuki-shunsuke" && ActionVersion == "main" +# - min_age: 0 +# conditions: +# - expr: | +# ActionName matches "actions/.*" From 8a85c6d9c357005765abe7a1c47daa3827696d09 Mon Sep 17 00:00:00 2001 From: Stuart Mumford Date: Thu, 6 Aug 2026 09:43:29 +0100 Subject: [PATCH 3/6] sigh --- .github/workflows/gha-update.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/gha-update.yml b/.github/workflows/gha-update.yml index 699e570..ea3662e 100644 --- a/.github/workflows/gha-update.yml +++ b/.github/workflows/gha-update.yml @@ -30,6 +30,7 @@ jobs: config: .pinact.yaml - name: Create pull request + if: '!cancelled()' uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1 with: token: ${{ secrets.GITHUB_TOKEN }} From 3bf267d5e3544f6e9baa7f9123801738162ffd89 Mon Sep 17 00:00:00 2001 From: Stuart Mumford Date: Thu, 6 Aug 2026 09:52:19 +0100 Subject: [PATCH 4/6] Update a single PR --- .github/workflows/gha-update.yml | 21 ++++++++++----------- 1 file changed, 10 insertions(+), 11 deletions(-) diff --git a/.github/workflows/gha-update.yml b/.github/workflows/gha-update.yml index ea3662e..957cc56 100644 --- a/.github/workflows/gha-update.yml +++ b/.github/workflows/gha-update.yml @@ -1,4 +1,4 @@ -name: Update GitHub Actions versions in template +name: Update GitHub Actions versions permissions: contents: write pull-requests: write @@ -6,14 +6,13 @@ permissions: on: # Allow manual runs through the web UI workflow_dispatch: - # This is currently disabled because it would cause all updates to fail - #schedule: - # # ┌───────── minute (0 - 59) - # # │ ┌───────── hour (0 - 23) - # # │ │ ┌───────── day of the month (1 - 31) - # # │ │ │ ┌───────── month (1 - 12 or JAN-DEC) - # # │ │ │ │ ┌───────── day of the week (0 - 6 or SUN-SAT) - # - cron: '0 7 * * 1' # Every Monday at 7am UTC + schedule: + # ┌───────── minute (0 - 59) + # │ ┌───────── hour (0 - 23) + # │ │ ┌───────── day of the month (1 - 31) + # │ │ │ ┌───────── month (1 - 12 or JAN-DEC) + # │ │ │ │ ┌───────── day of the week (0 - 6 or SUN-SAT) + - cron: '0 7 * * 1-5' # Every Monday at 7am UTC jobs: update: @@ -36,9 +35,9 @@ jobs: token: ${{ secrets.GITHUB_TOKEN }} add-paths: . delete-branch: true - branch-suffix: timestamp + branch: create-pull-request/pinact-actions-update title: "Update GitHub Actions versions" body: | This is an autogenerated PR which updates GitHub Actions version pins. - Generated by [gha-update](https://github.com/davidism/gha-update). + Generated by [pinact](https://github.com/suzuki-shunsuke/pinact). From efe730bf60b18357c2506b8d36ecfa2832cc142e Mon Sep 17 00:00:00 2001 From: Stuart Mumford Date: Thu, 6 Aug 2026 15:13:48 +0000 Subject: [PATCH 5/6] Apply suggestion from @Cadair --- .pinact.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/.pinact.yaml b/.pinact.yaml index 66e9db9..c5bf8f9 100644 --- a/.pinact.yaml +++ b/.pinact.yaml @@ -6,7 +6,6 @@ min_age: always: false # allow early updates separator: " # " files: - - pattern: .github/workflows/*.yml - pattern: .github/workflows/*.yml - pattern: "{{ cookiecutter.package_name }}/.github/workflows/*.yml" From c88fadf89813a91413adfcb333b64e16f3083e85 Mon Sep 17 00:00:00 2001 From: Stuart Mumford Date: Thu, 6 Aug 2026 15:29:42 +0000 Subject: [PATCH 6/6] Update .github/workflows/gha-update.yml --- .github/workflows/gha-update.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/gha-update.yml b/.github/workflows/gha-update.yml index 957cc56..0dacf6d 100644 --- a/.github/workflows/gha-update.yml +++ b/.github/workflows/gha-update.yml @@ -12,7 +12,7 @@ on: # │ │ ┌───────── day of the month (1 - 31) # │ │ │ ┌───────── month (1 - 12 or JAN-DEC) # │ │ │ │ ┌───────── day of the week (0 - 6 or SUN-SAT) - - cron: '0 7 * * 1-5' # Every Monday at 7am UTC + - cron: '0 7 * * 1-5' # Every day at 7am UTC jobs: update: