Conversation
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: amannn/action-semantic-pull-request@v5 | ||
| - uses: amannn/action-semantic-pull-request@e32d7e603df1aa1ba07e981f2a23455dee596825 # was: amannn/action-semantic-pull-request@v5 |
There was a problem hiding this comment.
it's a bit strange, but the latest version v5.5.3 has another hash: https://github.com/amannn/action-semantic-pull-request/releases/tag/v5.5.3
There was a problem hiding this comment.
Good catch - I feel this might be a bug then with the tool. The commit it referenced is here amannn/action-semantic-pull-request@e32d7e6
There was a problem hiding this comment.
The maintainer of this action did not rewrite the major tag to always point to the latest patch or minor version. Therefore, the v5 tag is fixed to commit e32d7e603df1aa1ba07e981f2a23455dee596825.
There was a problem hiding this comment.
thanks @nikpivkin - @afdesk since we were using v5, I think the SHA makes sense. WDYT?
3 participants
Description
ci: pin all actions by SHA
Uses https://github.com/metcalfc/gh-refme
Checklist