From 939072bdd00f72a6d9bcc600d0b02aa9afd8d5ea Mon Sep 17 00:00:00 2001 From: Bryan Fawcett Date: Wed, 21 Oct 2026 15:27:29 +0700 Subject: [PATCH] ci: pin nyuchi/.github workflows to v0.2.0 Every reference to a nyuchi/.github reusable workflow or action now pins c2be05a22aeb6a98a80a9301f6b3e33bb88b20b0 (v0.2.0, the first tagged release of its main). Across the orgs they had drifted to eight versions, one from 2026-10-04 in 108 places, plus 55 unpinned @main references. With the release tag beside the SHA, Dependabot (github-actions, target-branch staging) opens the PR to move the pin when nyuchi/.github releases again. Each old pin's inputs, secrets and outputs are a subset of v0.2.0's; the inputs added since are optional. Co-Authored-By: Claude Opus 5.5 Signed-off-by: Bryan Fawcett --- .github/workflows/auto-tag.yml | 2 +- .github/workflows/staging-version.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/auto-tag.yml b/.github/workflows/auto-tag.yml index 20cc31400..6608b1997 100644 --- a/.github/workflows/auto-tag.yml +++ b/.github/workflows/auto-tag.yml @@ -23,7 +23,7 @@ permissions: jobs: tag: if: github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success' - uses: nyuchi/.github/.github/workflows/reusable-auto-tag.yml@924e5b4d0983d31379aedbec02b990793f29c792 # main, 2026-10-04 + uses: nyuchi/.github/.github/workflows/reusable-auto-tag.yml@c2be05a22aeb6a98a80a9301f6b3e33bb88b20b0 # v0.2.0 with: version-command: "" channel: main diff --git a/.github/workflows/staging-version.yml b/.github/workflows/staging-version.yml index d14635676..0a8961a0d 100644 --- a/.github/workflows/staging-version.yml +++ b/.github/workflows/staging-version.yml @@ -20,7 +20,7 @@ permissions: jobs: version: if: github.ref == 'refs/heads/staging' - uses: nyuchi/.github/.github/workflows/reusable-staging-release.yml@924e5b4d0983d31379aedbec02b990793f29c792 # main, 2026-10-04 + uses: nyuchi/.github/.github/workflows/reusable-staging-release.yml@c2be05a22aeb6a98a80a9301f6b3e33bb88b20b0 # v0.2.0 with: bump: ${{ inputs.bump || '' }} permissions: