Skip to content

chore(ci): fix zizmor version comments#665

Merged
jdx merged 1 commit into
mainfrom
chore/fix-zizmor-version-comments
Jun 4, 2026
Merged

chore(ci): fix zizmor version comments#665
jdx merged 1 commit into
mainfrom
chore/fix-zizmor-version-comments

Conversation

@jdx

@jdx jdx commented Jun 4, 2026

Copy link
Copy Markdown
Owner

Summary

  • update hash-pinned action version comments to match the exact tags zizmor resolves
  • use # v6.0.2 for the pinned actions/checkout SHA
  • use # v4.0.1 for the pinned jdx/mise-action SHA

Tests

  • actionlint .github/workflows/*.yml

This PR was generated by an AI coding assistant.


Note

Low Risk
Comment-only workflow edits; pinned SHAs and job logic are unchanged.

Overview
Updates inline version comments on hash-pinned GitHub Actions across CI workflows so they match the exact release tags zizmor resolves for those SHAs—no commit pins or workflow behavior change.

actions/checkout comments move from # v6 to # v6.0.2; jdx/mise-action comments move from # v4 to # v4.0.1. The same comment edits appear in coverage, docs, publish-cli, release-plz, test, and zizmor workflows.

Reviewed by Cursor Bugbot for commit 2561796. Bugbot is set up for automated code reviews on this repo. Configure here.

@coderabbitai

coderabbitai Bot commented Jun 4, 2026

Copy link
Copy Markdown

Warning

Review limit reached

@jdx, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 3 minutes and 13 seconds. Learn how PR review limits work.

Your organization has run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 9767763e-a87b-41bc-9e05-3c80399e1e3a

📥 Commits

Reviewing files that changed from the base of the PR and between 822d187 and 2561796.

📒 Files selected for processing (6)
  • .github/workflows/coverage.yml
  • .github/workflows/docs.yml
  • .github/workflows/publish-cli.yml
  • .github/workflows/release-plz.yml
  • .github/workflows/test.yml
  • .github/workflows/zizmor.yml
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/fix-zizmor-version-comments

Comment @coderabbitai help to get the list of available commands and usage tips.

@greptile-apps

greptile-apps Bot commented Jun 4, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

This PR updates the human-readable version comments on hash-pinned GitHub Actions steps across all six workflow files, changing # v6# v6.0.2 for actions/checkout and # v4# v4.0.1 for jdx/mise-action. No SHAs or any functional workflow logic are touched.

  • All six workflow files receive identical comment-only annotation fixes so the inline version hints match what zizmor resolves for the pinned SHAs.
  • The zizmor.yml workflow itself is also updated, ensuring the linter's own checkout step carries an accurate version label.

Confidence Score: 5/5

All changes are comment-only; no SHAs, logic, or workflow behavior is altered in any way.

Every line changed is a YAML comment that zizmor reads for version-hint validation. The actual pinned commit SHAs are untouched across all six files, so there is no risk of running different code than before.

No files require special attention.

Important Files Changed

Filename Overview
.github/workflows/coverage.yml Version comments updated: # v6# v6.0.2 and # v4# v4.0.1; no SHA or functional changes.
.github/workflows/docs.yml Same comment-only pin annotation updates as other workflow files; no functional changes.
.github/workflows/publish-cli.yml Four occurrences of the version comment annotations updated; no SHA or logic changes.
.github/workflows/release-plz.yml Comment annotations updated from # v6 / # v4 to exact patch versions; no functional changes.
.github/workflows/test.yml Comment-only update aligning pin annotations with zizmor-resolved exact versions.
.github/workflows/zizmor.yml Single comment annotation updated from # v6 to # v6.0.2 for the actions/checkout pin.

Reviews (1): Last reviewed commit: "chore(ci): fix zizmor version comments" | Re-trigger Greptile

@jdx jdx enabled auto-merge (squash) June 4, 2026 17:21
@codecov

codecov Bot commented Jun 4, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.59%. Comparing base (822d187) to head (2561796).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #665   +/-   ##
=======================================
  Coverage   73.59%   73.59%           
=======================================
  Files          50       50           
  Lines        7824     7824           
  Branches     7824     7824           
=======================================
  Hits         5758     5758           
  Misses       1334     1334           
  Partials      732      732           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@jdx jdx merged commit f1d2c96 into main Jun 4, 2026
9 checks passed
@jdx jdx deleted the chore/fix-zizmor-version-comments branch June 4, 2026 17:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant