Walkthrough

Pins GitHub Actions used in the release workflow to specific commit SHAs, removes the workflow-level contents: write permission, and converts the WABT action's with configuration from an inline mapping to a multi-line mapping while keeping the same version values.

Changes

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• Cleanup release.yml a bit #7499 — Also pins third-party GitHub Actions to specific commit SHAs in .github/workflows/release.yml.
• Adjust permissions of update-doc-db job #7496 — Removes or tightens workflow-level contents: write permissions in workflow files.
• Pin rust-toolchain action to a commit hash - part 1 #7500 — Pins dtolnay/rust-toolchain action to a specific commit SHA across workflows.

Suggested labels

skip:ci

Suggested reviewers

• youknowone

Poem

🐰 I hopped through YAML lines tonight,

Pinned each action snug and tight,
Took away a write of old,
Kept the versions, neat and bold,
Builds will hum without a fright.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

• X
• Mastodon
• Reddit
• LinkedIn