From a0002acd95b7f5430a109798714a5fdb39b34a2a Mon Sep 17 00:00:00 2001 From: sue445 Date: Mon, 2 Nov 2026 00:04:50 +0900 Subject: [PATCH 1/2] Unpin Use readable version refs so GitHub Actions dependency pins can be managed in the workflow lockfile. Co-authored-by: Codex --- .github/workflows/test.yml | 26 +++++++++++++------------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 896b75e..0e3bb15 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -24,9 +24,9 @@ jobs: - "4.0" steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7.0.1 - - uses: ruby/setup-ruby@7f797815d8adceb1c412e7abefdd1ab4abc47a5f # v1.335.0 + - uses: ruby/setup-ruby@v1.335.0 with: ruby-version: ${{ matrix.ruby }} bundler-cache: true @@ -43,7 +43,7 @@ jobs: - run: bundle exec rake spec - name: Slack Notification (not success) - uses: act10ns/slack@d96404edccc6d6467fc7f8134a420c851b1e9054 # v2.2.0 + uses: act10ns/slack@v2.2.0 if: "! success()" continue-on-error: true with: @@ -55,9 +55,9 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7.0.1 - - uses: ruby/setup-ruby@7f797815d8adceb1c412e7abefdd1ab4abc47a5f # v1.335.0 + - uses: ruby/setup-ruby@v1.335.0 with: ruby-version: ruby bundler-cache: true @@ -71,7 +71,7 @@ jobs: - run: bundle exec rake rubocop - name: Slack Notification (not success) - uses: act10ns/slack@d96404edccc6d6467fc7f8134a420c851b1e9054 # v2.2.0 + uses: act10ns/slack@v2.2.0 if: "! success()" continue-on-error: true with: @@ -82,9 +82,9 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7.0.1 - - uses: ruby/setup-ruby@7f797815d8adceb1c412e7abefdd1ab4abc47a5f # v1.335.0 + - uses: ruby/setup-ruby@v1.335.0 with: ruby-version: ruby bundler-cache: true @@ -99,7 +99,7 @@ jobs: - run: bundle exec rake rbs - name: Slack Notification (not success) - uses: act10ns/slack@d96404edccc6d6467fc7f8134a420c851b1e9054 # v2.2.0 + uses: act10ns/slack@v2.2.0 if: "! success()" continue-on-error: true with: @@ -110,9 +110,9 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7.0.1 - - uses: ruby/setup-ruby@7f797815d8adceb1c412e7abefdd1ab4abc47a5f # v1.335.0 + - uses: ruby/setup-ruby@v1.335.0 with: ruby-version: ruby bundler-cache: true @@ -130,7 +130,7 @@ jobs: ls -ld doc/ - name: Slack Notification (not success) - uses: act10ns/slack@d96404edccc6d6467fc7f8134a420c851b1e9054 # v2.2.0 + uses: act10ns/slack@v2.2.0 if: "! success()" continue-on-error: true with: @@ -150,6 +150,6 @@ jobs: steps: - name: check dependent jobs - uses: re-actors/alls-green@b5b5b37504aa4183270bd3d855c52a67f212be35 # v1.3.0 + uses: re-actors/alls-green@v1.3.0 with: jobs: ${{ toJSON(needs) }} From ed675b5b3380fd5fb32ff6ab875c772654f590ce Mon Sep 17 00:00:00 2001 From: sue445 Date: Mon, 2 Nov 2026 00:04:57 +0900 Subject: [PATCH 2/2] gh actions-lock Record immutable GitHub Actions dependencies in a lockfile so dependency changes can be reviewed while workflows retain readable version refs. Co-authored-by: Codex --- .github/workflows/actions.lock | 35 ++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 .github/workflows/actions.lock diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock new file mode 100644 index 0000000..401c583 --- /dev/null +++ b/.github/workflows/actions.lock @@ -0,0 +1,35 @@ +# This file is machine-generated by `gh actions-lock`. +# Do not edit by hand; run `gh actions-lock` to update. +# Docs: https://gh.io/actions-lockfile +version: 'v0.0.3' +workflows: + '.github/workflows/dependabot-manager.yml': [] + '.github/workflows/pages.yml': [] + '.github/workflows/rbs-collection-updater.yml': [] + '.github/workflows/release_gem.yml': [] + '.github/workflows/test.yml': + - 'act10ns/slack@v2.2.0' + - 'actions/checkout@v7.0.1' + - 're-actors/alls-green@v1.3.0' + - 'ruby/setup-ruby@v1.335.0' +dependencies: + 'act10ns/slack@v2.2.0': + ref: 'v2.2.0' + commit: 'sha1-d96404edccc6d6467fc7f8134a420c851b1e9054' + owner_id: 65077766 + repo_id: 262583918 + 'actions/checkout@v7.0.1': + ref: 'v7.0.1' + commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' + owner_id: 44036562 + repo_id: 197814629 + 're-actors/alls-green@v1.3.0': + ref: 'v1.3.0' + commit: 'sha1-b5b5b37504aa4183270bd3d855c52a67f212be35' + owner_id: 46427759 + repo_id: 434447646 + 'ruby/setup-ruby@v1.335.0': + ref: 'v1.335.0' + commit: 'sha1-7f797815d8adceb1c412e7abefdd1ab4abc47a5f' + owner_id: 210414 + repo_id: 231208785