From 6f9fb379dafca5b99149dc83fea9cddd677505b4 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Sat, 19 Sep 2026 23:06:46 +0000 Subject: [PATCH 1/2] fix(ci): regenerate actions.lock so it matches the SHA-pinned workflows MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The lockfile is a manifest of workflow -> action@ref. Pinning the refs without regenerating it makes the whole repository unstartable: Invalid lockfile: .github/workflows/actions.lock#L1 — regenerate with `gh actions-lock`. `gh actions-lock` is not in any released gh CLI, so this regenerates the manifest from the workflows themselves, preserving each action's owner_id/repo_id. --- .github/workflows/actions.lock | 162 +++++++++++++++------------------ 1 file changed, 71 insertions(+), 91 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index fefadef..45510b8 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -4,148 +4,128 @@ version: 'v0.0.2' workflows: '.github/workflows/bridge-gate.yml': - - 'actions/checkout@v7.0.1' + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' '.github/workflows/build-validation.yml': - - 'actions/checkout@v7.0.1' - - 'dtolnay/rust-toolchain@stable' - - 'erlef/setup-beam@v1.24.1' + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87' + - 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124' '.github/workflows/cflite_batch.yml': - - 'google/clusterfuzzlite@v1' + - 'google/clusterfuzzlite@884713a6c30a92e5e8544c39945cd7cb630abcd1' '.github/workflows/cflite_pr.yml': - - 'google/clusterfuzzlite@v1' + - 'google/clusterfuzzlite@884713a6c30a92e5e8544c39945cd7cb630abcd1' '.github/workflows/codeql.yml': - - 'actions/checkout@v7.0.1' - - 'github/codeql-action@v4.37.9' + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'github/codeql-action@cdf488f595d80d6e07e03d4674febd5ab45fa938' '.github/workflows/coq-build.yml': - - 'actions/checkout@v7.0.1' + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' '.github/workflows/doc-consonance.yml': - - 'actions/checkout@v7.0.1' + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' '.github/workflows/dogfood-gate.yml': - - 'actions/checkout@v7.0.1' + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' '.github/workflows/elixir-ci.yml': - - 'actions/cache@v6.1.0' - - 'actions/checkout@v7.0.1' - - 'codecov/codecov-action@v7.0.0' - - 'erlef/setup-beam@v1.24.1' + - 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9' + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4' + - 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124' '.github/workflows/fuzz.yml': - - 'actions/checkout@v7.0.1' - - 'dtolnay/rust-toolchain@stable' + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87' '.github/workflows/ghcr-publish.yml': - - 'actions/attest-build-provenance@v4.2.2' - - 'actions/checkout@v7.0.1' - '.github/workflows/governance.yml': [] - '.github/workflows/hypatia-scan.yml': [] + - 'actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8' + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + '.github/workflows/governance.yml': + '.github/workflows/hypatia-scan.yml': '.github/workflows/instant-sync.yml': - - 'peter-evans/repository-dispatch@v4.0.1' - '.github/workflows/label-triage.yml': [] - '.github/workflows/labels.yml': [] - '.github/workflows/mirror.yml': [] + - 'peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697' + '.github/workflows/label-triage.yml': + '.github/workflows/labels.yml': + '.github/workflows/mirror.yml': '.github/workflows/pages.yml': - - 'actions/checkout@v7.0.1' - - 'actions/deploy-pages@v5.0.1' - - 'actions/upload-pages-artifact@v5.0.0' + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346' + - 'actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9' '.github/workflows/reuse.yml': - - 'actions/checkout@v7.0.1' + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' '.github/workflows/rust-ci.yml': - - 'actions/checkout@v7.0.1' - - 'actions/upload-artifact@v7.0.1' - - 'codecov/codecov-action@v7.0.0' - - 'dtolnay/rust-toolchain@stable' - - 'rustsec/audit-check@v2.0.0' - - 'taiki-e/install-action@v2.87.3' - '.github/workflows/scorecard.yml': [] - '.github/workflows/secret-scanner.yml': [] - '.github/workflows/security-scan.yml': [] - '.github/workflows/spark-theatre-gate.yml': [] -dependencies: - 'actions/attest-build-provenance@v4.2.2': - ref: 'v4.2.2' + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a' + - 'codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4' + - 'dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87' + - 'rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998' + - 'taiki-e/install-action@26e9283f268b880168bdbd2c545dfcd60ec2c6ab' + '.github/workflows/scorecard.yml': + '.github/workflows/secret-scanner.yml': + '.github/workflows/security-scan.yml': + '.github/workflows/spark-theatre-gate.yml': + +actions: + 'actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8': + ref: '4d101475d8b20a2381f78447822ac1eab6504dd8' commit: 'sha1-4d101475d8b20a2381f78447822ac1eab6504dd8' owner_id: 44036562 repo_id: 760702757 - uses: - - 'actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d' - 'actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d': - ref: 'v4.2.1' - commit: 'sha1-508db95dd578ae2727ebd6217d5ba78e4fbda05d' - owner_id: 44036562 - repo_id: 760701061 - 'actions/cache@v6.1.0': - ref: 'v6.1.0' + 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9': + ref: '55cc8345863c7cc4c66a329aec7e433d2d1c52a9' commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9' owner_id: 44036562 repo_id: 215566462 - 'actions/checkout@v7.0.1': - ref: 'v7.0.1' + 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1': + ref: '3d3c42e5aac5ba805825da76410c181273ba90b1' commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' owner_id: 44036562 repo_id: 197814629 - 'actions/deploy-pages@v5.0.1': - ref: 'v5.0.1' + 'actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346': + ref: '368f82528645a54fb793d4d04e342629a3f51346' commit: 'sha1-368f82528645a54fb793d4d04e342629a3f51346' owner_id: 44036562 repo_id: 438112499 - 'actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd': - ref: 'v8.0.0' - commit: 'sha1-ed597411d8f924073f98dfc5c65a23a2325f34cd' - owner_id: 44036562 - repo_id: 205262760 - 'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f': - ref: 'v7.0.0' - commit: 'sha1-bbbca2ddaa5d8feaa63e36b76fdaad77386f024f' - owner_id: 44036562 - repo_id: 192625955 - 'actions/upload-artifact@v7.0.1': - ref: 'v7.0.1' + 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a': + ref: '043fb46d1a93c77aae656e7c1c64a875d1fc6a0a' commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a' owner_id: 44036562 repo_id: 192625955 - 'actions/upload-pages-artifact@v5.0.0': - ref: 'v5.0.0' + 'actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9': + ref: 'fc324d3547104276b827a68afc52ff2a11cc49c9' commit: 'sha1-fc324d3547104276b827a68afc52ff2a11cc49c9' owner_id: 44036562 repo_id: 496012378 - uses: - - 'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f' - 'codecov/codecov-action@v7.0.0': - ref: 'v7.0.0' - commit: 'sha1-fb8b3582c8e4def4969c97caa2f19720cb33a72f' + 'codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4': + ref: '0b35c9ecc4f0529d0eb674914510c22f85b196b4' + commit: 'sha1-0b35c9ecc4f0529d0eb674914510c22f85b196b4' owner_id: 8226205 repo_id: 200299178 - uses: - - 'actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd' - 'dtolnay/rust-toolchain@stable': - ref: 'stable' + 'dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87': + ref: '6bed0761d98439e5a578e2877258200ad565ba87' commit: 'sha1-6bed0761d98439e5a578e2877258200ad565ba87' owner_id: 1940490 repo_id: 260749683 - 'erlef/setup-beam@v1.24.1': - ref: 'v1.24.1' + 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124': + ref: '54075bcc5e249e4758d363f27d099f55d843f124' commit: 'sha1-54075bcc5e249e4758d363f27d099f55d843f124' owner_id: 47606891 repo_id: 331103973 - 'github/codeql-action@v4.37.9': - ref: 'v4.37.9' + 'github/codeql-action@cdf488f595d80d6e07e03d4674febd5ab45fa938': + ref: 'cdf488f595d80d6e07e03d4674febd5ab45fa938' commit: 'sha1-cdf488f595d80d6e07e03d4674febd5ab45fa938' owner_id: 9919 repo_id: 259445878 - 'google/clusterfuzzlite@v1': - ref: 'v1' + 'google/clusterfuzzlite@884713a6c30a92e5e8544c39945cd7cb630abcd1': + ref: '884713a6c30a92e5e8544c39945cd7cb630abcd1' commit: 'sha1-884713a6c30a92e5e8544c39945cd7cb630abcd1' owner_id: 1342004 repo_id: 400046858 - 'peter-evans/repository-dispatch@v4.0.1': - ref: 'v4.0.1' + 'peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697': + ref: '28959ce8df70de7be546dd1250a005dd32156697' commit: 'sha1-28959ce8df70de7be546dd1250a005dd32156697' owner_id: 18365890 repo_id: 220359305 - 'rustsec/audit-check@v2.0.0': - ref: 'v2.0.0' + 'rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998': + ref: '69366f33c96575abad1ee0dba8212993eecbe998' commit: 'sha1-69366f33c96575abad1ee0dba8212993eecbe998' owner_id: 25397242 repo_id: 523199201 - 'taiki-e/install-action@v2.87.3': - ref: 'v2.87.3' - commit: 'sha1-0758d235715de2f3551eacc980d9ae8fce9342c3' + 'taiki-e/install-action@26e9283f268b880168bdbd2c545dfcd60ec2c6ab': + ref: '26e9283f268b880168bdbd2c545dfcd60ec2c6ab' + commit: 'sha1-26e9283f268b880168bdbd2c545dfcd60ec2c6ab' owner_id: 43724913 repo_id: 442947557 From 4220a2bc2fe9da7bc8fd803066c8d54acfc12d4a Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Sat, 19 Sep 2026 23:10:51 +0000 Subject: [PATCH 2/2] fix(ci): regenerate the actions.lock manifest to match the SHA-pinned workflows --- .github/workflows/actions.lock | 162 ++++++++++++++++++--------------- 1 file changed, 91 insertions(+), 71 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 45510b8..fefadef 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -4,128 +4,148 @@ version: 'v0.0.2' workflows: '.github/workflows/bridge-gate.yml': - - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'actions/checkout@v7.0.1' '.github/workflows/build-validation.yml': - - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' - - 'dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87' - - 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124' + - 'actions/checkout@v7.0.1' + - 'dtolnay/rust-toolchain@stable' + - 'erlef/setup-beam@v1.24.1' '.github/workflows/cflite_batch.yml': - - 'google/clusterfuzzlite@884713a6c30a92e5e8544c39945cd7cb630abcd1' + - 'google/clusterfuzzlite@v1' '.github/workflows/cflite_pr.yml': - - 'google/clusterfuzzlite@884713a6c30a92e5e8544c39945cd7cb630abcd1' + - 'google/clusterfuzzlite@v1' '.github/workflows/codeql.yml': - - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' - - 'github/codeql-action@cdf488f595d80d6e07e03d4674febd5ab45fa938' + - 'actions/checkout@v7.0.1' + - 'github/codeql-action@v4.37.9' '.github/workflows/coq-build.yml': - - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'actions/checkout@v7.0.1' '.github/workflows/doc-consonance.yml': - - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'actions/checkout@v7.0.1' '.github/workflows/dogfood-gate.yml': - - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'actions/checkout@v7.0.1' '.github/workflows/elixir-ci.yml': - - 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9' - - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' - - 'codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4' - - 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124' + - 'actions/cache@v6.1.0' + - 'actions/checkout@v7.0.1' + - 'codecov/codecov-action@v7.0.0' + - 'erlef/setup-beam@v1.24.1' '.github/workflows/fuzz.yml': - - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' - - 'dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87' + - 'actions/checkout@v7.0.1' + - 'dtolnay/rust-toolchain@stable' '.github/workflows/ghcr-publish.yml': - - 'actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8' - - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' - '.github/workflows/governance.yml': - '.github/workflows/hypatia-scan.yml': + - 'actions/attest-build-provenance@v4.2.2' + - 'actions/checkout@v7.0.1' + '.github/workflows/governance.yml': [] + '.github/workflows/hypatia-scan.yml': [] '.github/workflows/instant-sync.yml': - - 'peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697' - '.github/workflows/label-triage.yml': - '.github/workflows/labels.yml': - '.github/workflows/mirror.yml': + - 'peter-evans/repository-dispatch@v4.0.1' + '.github/workflows/label-triage.yml': [] + '.github/workflows/labels.yml': [] + '.github/workflows/mirror.yml': [] '.github/workflows/pages.yml': - - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' - - 'actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346' - - 'actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9' + - 'actions/checkout@v7.0.1' + - 'actions/deploy-pages@v5.0.1' + - 'actions/upload-pages-artifact@v5.0.0' '.github/workflows/reuse.yml': - - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'actions/checkout@v7.0.1' '.github/workflows/rust-ci.yml': - - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' - - 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a' - - 'codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4' - - 'dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87' - - 'rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998' - - 'taiki-e/install-action@26e9283f268b880168bdbd2c545dfcd60ec2c6ab' - '.github/workflows/scorecard.yml': - '.github/workflows/secret-scanner.yml': - '.github/workflows/security-scan.yml': - '.github/workflows/spark-theatre-gate.yml': - -actions: - 'actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8': - ref: '4d101475d8b20a2381f78447822ac1eab6504dd8' + - 'actions/checkout@v7.0.1' + - 'actions/upload-artifact@v7.0.1' + - 'codecov/codecov-action@v7.0.0' + - 'dtolnay/rust-toolchain@stable' + - 'rustsec/audit-check@v2.0.0' + - 'taiki-e/install-action@v2.87.3' + '.github/workflows/scorecard.yml': [] + '.github/workflows/secret-scanner.yml': [] + '.github/workflows/security-scan.yml': [] + '.github/workflows/spark-theatre-gate.yml': [] +dependencies: + 'actions/attest-build-provenance@v4.2.2': + ref: 'v4.2.2' commit: 'sha1-4d101475d8b20a2381f78447822ac1eab6504dd8' owner_id: 44036562 repo_id: 760702757 - 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9': - ref: '55cc8345863c7cc4c66a329aec7e433d2d1c52a9' + uses: + - 'actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d' + 'actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d': + ref: 'v4.2.1' + commit: 'sha1-508db95dd578ae2727ebd6217d5ba78e4fbda05d' + owner_id: 44036562 + repo_id: 760701061 + 'actions/cache@v6.1.0': + ref: 'v6.1.0' commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9' owner_id: 44036562 repo_id: 215566462 - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1': - ref: '3d3c42e5aac5ba805825da76410c181273ba90b1' + 'actions/checkout@v7.0.1': + ref: 'v7.0.1' commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' owner_id: 44036562 repo_id: 197814629 - 'actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346': - ref: '368f82528645a54fb793d4d04e342629a3f51346' + 'actions/deploy-pages@v5.0.1': + ref: 'v5.0.1' commit: 'sha1-368f82528645a54fb793d4d04e342629a3f51346' owner_id: 44036562 repo_id: 438112499 - 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a': - ref: '043fb46d1a93c77aae656e7c1c64a875d1fc6a0a' + 'actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd': + ref: 'v8.0.0' + commit: 'sha1-ed597411d8f924073f98dfc5c65a23a2325f34cd' + owner_id: 44036562 + repo_id: 205262760 + 'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f': + ref: 'v7.0.0' + commit: 'sha1-bbbca2ddaa5d8feaa63e36b76fdaad77386f024f' + owner_id: 44036562 + repo_id: 192625955 + 'actions/upload-artifact@v7.0.1': + ref: 'v7.0.1' commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a' owner_id: 44036562 repo_id: 192625955 - 'actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9': - ref: 'fc324d3547104276b827a68afc52ff2a11cc49c9' + 'actions/upload-pages-artifact@v5.0.0': + ref: 'v5.0.0' commit: 'sha1-fc324d3547104276b827a68afc52ff2a11cc49c9' owner_id: 44036562 repo_id: 496012378 - 'codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4': - ref: '0b35c9ecc4f0529d0eb674914510c22f85b196b4' - commit: 'sha1-0b35c9ecc4f0529d0eb674914510c22f85b196b4' + uses: + - 'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f' + 'codecov/codecov-action@v7.0.0': + ref: 'v7.0.0' + commit: 'sha1-fb8b3582c8e4def4969c97caa2f19720cb33a72f' owner_id: 8226205 repo_id: 200299178 - 'dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87': - ref: '6bed0761d98439e5a578e2877258200ad565ba87' + uses: + - 'actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd' + 'dtolnay/rust-toolchain@stable': + ref: 'stable' commit: 'sha1-6bed0761d98439e5a578e2877258200ad565ba87' owner_id: 1940490 repo_id: 260749683 - 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124': - ref: '54075bcc5e249e4758d363f27d099f55d843f124' + 'erlef/setup-beam@v1.24.1': + ref: 'v1.24.1' commit: 'sha1-54075bcc5e249e4758d363f27d099f55d843f124' owner_id: 47606891 repo_id: 331103973 - 'github/codeql-action@cdf488f595d80d6e07e03d4674febd5ab45fa938': - ref: 'cdf488f595d80d6e07e03d4674febd5ab45fa938' + 'github/codeql-action@v4.37.9': + ref: 'v4.37.9' commit: 'sha1-cdf488f595d80d6e07e03d4674febd5ab45fa938' owner_id: 9919 repo_id: 259445878 - 'google/clusterfuzzlite@884713a6c30a92e5e8544c39945cd7cb630abcd1': - ref: '884713a6c30a92e5e8544c39945cd7cb630abcd1' + 'google/clusterfuzzlite@v1': + ref: 'v1' commit: 'sha1-884713a6c30a92e5e8544c39945cd7cb630abcd1' owner_id: 1342004 repo_id: 400046858 - 'peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697': - ref: '28959ce8df70de7be546dd1250a005dd32156697' + 'peter-evans/repository-dispatch@v4.0.1': + ref: 'v4.0.1' commit: 'sha1-28959ce8df70de7be546dd1250a005dd32156697' owner_id: 18365890 repo_id: 220359305 - 'rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998': - ref: '69366f33c96575abad1ee0dba8212993eecbe998' + 'rustsec/audit-check@v2.0.0': + ref: 'v2.0.0' commit: 'sha1-69366f33c96575abad1ee0dba8212993eecbe998' owner_id: 25397242 repo_id: 523199201 - 'taiki-e/install-action@26e9283f268b880168bdbd2c545dfcd60ec2c6ab': - ref: '26e9283f268b880168bdbd2c545dfcd60ec2c6ab' - commit: 'sha1-26e9283f268b880168bdbd2c545dfcd60ec2c6ab' + 'taiki-e/install-action@v2.87.3': + ref: 'v2.87.3' + commit: 'sha1-0758d235715de2f3551eacc980d9ae8fce9342c3' owner_id: 43724913 repo_id: 442947557