Skip to content

Pin actions#175

Merged
awalsh128 merged 2 commits intoawalsh128:masterfrom
danewilson:pin-actions
Oct 4, 2025
Merged

Pin actions#175
awalsh128 merged 2 commits intoawalsh128:masterfrom
danewilson:pin-actions

Conversation

@danewilson
Copy link
Copy Markdown
Contributor

@danewilson danewilson commented Oct 1, 2025

Pin the actions by their commit SHA so this action can be used in repositories that require all actions to be pinned.

@ulgens
Copy link
Copy Markdown
Contributor

ulgens commented Oct 1, 2025

Any chance we pin to patch versions before pin hashing? Otherwise, automatic updates don't update the version comment and it gets harder to understand if their release changed or they released something new.

@awalsh128 awalsh128 merged commit acb598e into awalsh128:master Oct 4, 2025
1 check passed
@awalsh128
Copy link
Copy Markdown
Owner

@danewilson or @ulgens can you do me a favor and test this against version acb598e5ddbc6f68a970c5da0688d2f3a9f04d05 of this action?

Also, would be interested to see the release process for new pins that point to stable builds.

@danewilson
Copy link
Copy Markdown
Contributor Author

I've tested this change in our own fork for what it's worth. If you're looking for a way to automate updating these digests then I can recommend Renovate.

@danewilson
Copy link
Copy Markdown
Contributor Author

@awalsh128 Can we get a new release containing these changes please?

@awalsh128 awalsh128 self-assigned this Oct 15, 2025
@awalsh128
Copy link
Copy Markdown
Owner

There was a new feature release for 3rd party PPA so I was holding off. I cut a new version at v1.6.0 though that you can use as a published action. I'll graduate it to the floating tags later but I don't think this is an issue for you since you are pinning all of your actions.

https://github.com/awalsh128/cache-apt-pkgs-action/releases/tag/v1.6.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants