Skip to content

chore(deps): disable hash pinning for GitHub Actions in Renovate config - #438

Merged
dbelyaev merged 2 commits into
masterfrom
feature/disable-renovate-hash-pin-for-github-actions
Dec 9, 2025
Merged

dbelyaev merged 2 commits into
masterfrom
feature/disable-renovate-hash-pin-for-github-actions

Conversation

@dbelyaev

@dbelyaev dbelyaev commented Dec 9, 2025

Copy link
Copy Markdown
Owner

No description provided.

Copilot AI review requested due to automatic review settings December 9, 2025 12:00
@github-actions github-actions Bot added the automation Changes to workflows label Dec 9, 2025
@dbelyaev dbelyaev self-assigned this Dec 9, 2025

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the Renovate configuration to disable digest/hash pinning for GitHub Actions from the actions/ and github/ namespaces, aligning the automated dependency management behavior with the existing codebase convention of using semantic version tags for first-party GitHub actions while maintaining digest pinning for third-party actions.

Key Changes:

  • Added a new package rule that disables pinDigests for GitHub Actions matching ^actions/ and ^github/ patterns
  • Reformatted existing JSON arrays to be more compact (single-line format)

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/renovate.json Outdated
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@dbelyaev
dbelyaev merged commit 88a395d into master Dec 9, 2025
19 of 22 checks passed
@dbelyaev
dbelyaev deleted the feature/disable-renovate-hash-pin-for-github-actions branch December 9, 2025 12:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automation Changes to workflows size/s

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants