Skip to content

ci: pin promote-baseline.yml actions by SHA with the exact release (CR-182) - #443

Merged
luisleo526 merged 7 commits into
mainfrom
tnx/promote-pins
Oct 20, 2026
Merged

luisleo526 merged 7 commits into
mainfrom
tnx/promote-pins

Conversation

@luisleo526

Copy link
Copy Markdown
Collaborator

CR-182 (follow-up of codegen-oss #223). .github/workflows/promote-baseline.yml only, 6 uses: lines: checkout x2 -> 3d3c42e5 (v7.0.1), create-github-app-token -> d72941d7 (v1.12.0, the SHA the workflow template and codegen carry), setup-node -> 949feb24 (v7.1.0), google-github-actions/auth -> 7c6bc770 (v3.0.0), setup-gcloud -> aa5489c8 (v3.0.1). The engine copy had floating @v4/@v1/@v2.
No other line changes; release.yml untouched. Claude Opus read: APPROVE.
Gate: .github-only diff -> verify/parity by the diff rule.

🤖 Generated with Claude Code

luisleo526 and others added 7 commits October 19, 2026 17:57
#223 landed

Only the six `uses:` lines change. Floating tags become the full SHAs and exact
release comments codegen-oss main carries since #223 (851290925):
actions/checkout v4 -> 3d3c42e5... # v7.0.1 (two steps), actions/setup-node
v4 -> 949feb24... # v7.1.0, google-github-actions/auth v2 -> 7c6bc770...
# v3.0.0, google-github-actions/setup-gcloud v2 -> aa5489c8... # v3.0.1, and
actions/create-github-app-token v1 -> d72941d7... # v1.12.0 (the SHA the
template and codegen copies already pin; this step is credentialed and its
major is deliberately not moved here, as in codegen).

Nothing else in the file is touched: no runs-on, permissions, secrets, trigger,
input or script line. This copy still differs from codegen's in its gate logic
and its cloud-sql-proxy loop (not part of this change).

Co-Authored-By: Claude Sonnet 5.5 <[email protected]>
Engine main moved after this branch was cut (#412, the EN-115 declaration, and
the CI commits before it). promote-baseline.yml is untouched by those commits;
the merge is clean and changes only what main brings. A merge commit, no
rebase, so the commit CORE-TOP already pushed (aafab8f) stays an ancestor.

Co-Authored-By: Claude Sonnet 5.5 <[email protected]>
@luisleo526
luisleo526 merged commit 88ec1b3 into main Oct 20, 2026
20 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant