Skip to content

chore: pin GitHub Actions to commit SHAs - #164

Merged
lvandenboom merged 3 commits into
mainfrom
chore/pin-actions-sha
Jun 15, 2026
Merged

lvandenboom merged 3 commits into
mainfrom
chore/pin-actions-sha

Conversation

@lvandenboom

@lvandenboom lvandenboom commented Jun 11, 2026 •

Copy link
Copy Markdown
Contributor

Summary

  • Pins GitHub Actions and reusable workflow references to full-length commit SHAs, per GitHub's secure-use guidance for third-party actions. SHA-pinned refs carry a trailing comment with the original tag/branch for readability.
  • Upgrades playwright to 1.59.1 to resolve an issue with Firefox tests timing out

Checklist

  • Added a changelog entry: N/A
  • Relevant test coverage: N/A
  • Tested and confirmed flows affected by this change are functioning as expected

Authors

List GitHub usernames for everyone who contributed to this pull request.

@lvandenboom

Reviewers

@braintree/team-sdk-js

@lvandenboom
lvandenboom requested a review from a team as a code owner June 11, 2026 15:33
@github-actions

github-actions Bot commented Jun 11, 2026 •

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities found.

Scanned Files

  • .github/workflows/release-notes.yml
  • .github/workflows/version-bump.yml
  • package-lock.json

@adrmachado-public

Copy link
Copy Markdown
Contributor

ahh unfortunately there are style issues in the files you changed, otherwise LGTM

GoogilyBoogily
GoogilyBoogily previously approved these changes Jun 15, 2026

@GoogilyBoogily GoogilyBoogily left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍 🐸

This might fix an issue we're having in CI with firefox tests timing
out.

@GoogilyBoogily GoogilyBoogily left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍 🐸

@lvandenboom
lvandenboom merged commit 27e965d into main Jun 15, 2026
8 checks passed
@lvandenboom
lvandenboom deleted the chore/pin-actions-sha branch June 15, 2026 20:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants