Skip to content

fix(ci): reconcile workflows with actions.lock (gh-actions-lock) - #274

Merged
hyperpolymath merged 1 commit into
mainfrom
fix/actions-lock-managed
Sep 19, 2026
Merged

hyperpolymath merged 1 commit into
mainfrom
fix/actions-lock-managed

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Replaces the hand-pinned refs with the official lockfile mechanism.

The lockfile is authoritative: workflows carry readable refs and the lock records the
commit each ref resolves to. Hand-pinning refs to SHAs broke that pairing and made
every workflow in the repo unstartable (startup_failure, 'Invalid lockfile').

Regenerated with github/gh-actions-lock v0.1.6 — the official CLI extension for this
feature. `gh actions-lock --verify-local` reports valid: true.
@coderabbitai

coderabbitai Bot commented Sep 19, 2026

Copy link
Copy Markdown
Contributor

Review Change StackReview Change Stack

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 9cf5519d-0337-4d55-86bf-1e12c9bc9963

📥 Commits

Reviewing files that changed from the base of the PR and between 26ed229 and f0c0ac7.

⛔ Files ignored due to path filters (1)
  • .github/workflows/actions.lock is excluded by !**/*.lock
📒 Files selected for processing (24)
  • .github/workflows/bridge-gate.yml
  • .github/workflows/build-validation.yml
  • .github/workflows/cflite_batch.yml
  • .github/workflows/cflite_pr.yml
  • .github/workflows/codeql.yml
  • .github/workflows/coq-build.yml
  • .github/workflows/doc-consonance.yml
  • .github/workflows/dogfood-gate.yml
  • .github/workflows/elixir-ci.yml
  • .github/workflows/fuzz.yml
  • .github/workflows/ghcr-publish.yml
  • .github/workflows/governance.yml
  • .github/workflows/hypatia-scan.yml
  • .github/workflows/instant-sync.yml
  • .github/workflows/label-triage.yml
  • .github/workflows/labels.yml
  • .github/workflows/mirror.yml
  • .github/workflows/pages.yml
  • .github/workflows/reuse.yml
  • .github/workflows/rust-ci.yml
  • .github/workflows/scorecard.yml
  • .github/workflows/secret-scanner.yml
  • .github/workflows/security-scan.yml
  • .github/workflows/spark-theatre-gate.yml
 _______________________________________________________________
< You're one `console.log` away from enlightenment. Keep going. >
 ---------------------------------------------------------------
  \
   \   \
        \ /\
        ( )
      .( o ).

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@hyperpolymath
hyperpolymath merged commit 82e3e9b into main Sep 19, 2026
25 of 31 checks passed
@hyperpolymath
hyperpolymath deleted the fix/actions-lock-managed branch September 19, 2026 23:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant