AT-based link agregator. Mirror of https://github.com/likeandscribe/frontpage

Pin actions versions (#304)

* Pin checkout action to commit ID

* Use full commit hash

* Update labeller

* Update go

* actions/cache

* Missed go action

* pnpm

* node

* Add note to copilot instructions

authored by tom.sherman.is and committed by

GitHub bd57b6b0 8b5135d6

+25 -24
+1
.github/copilot-instructions.md
··· 30 - `pnpm exec turbo run --affected type-check` 31 - Lexicon changes (`lexicons/**`) trigger Go-based `glot lint` and `glot compat`. 32 - Label sync on PRs; `sync-tangled` push job mirrors `main` to tangled.sh (uses secret). 33 34 ## Setup / bootstrap 35 1. Ensure Node 22.18 available (`nvm use`).
··· 30 - `pnpm exec turbo run --affected type-check` 31 - Lexicon changes (`lexicons/**`) trigger Go-based `glot lint` and `glot compat`. 32 - Label sync on PRs; `sync-tangled` push job mirrors `main` to tangled.sh (uses secret). 33 + - When adding new actions, prefer fixed SHAs over floating tags for stability. Include the version in a comment. 34 35 ## Setup / bootstrap 36 1. Ensure Node 22.18 available (`nvm use`).
+2 -2
.github/workflows/label.yml
··· 8 pull-requests: write 9 runs-on: ubuntu-latest 10 steps: 11 - - uses: actions/checkout@v4 12 with: 13 fetch-depth: 2 14 - - uses: actions/labeler@v5 15 with: 16 sync-labels: true
··· 8 pull-requests: write 9 runs-on: ubuntu-latest 10 steps: 11 + - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 12 with: 13 fetch-depth: 2 14 + - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1 15 with: 16 sync-labels: true
+6 -6
.github/workflows/lexicon-check.yml
··· 12 runs-on: ubuntu-latest 13 steps: 14 - name: Checkout code 15 - uses: actions/checkout@v4 16 17 - name: Setup Go 18 - uses: actions/setup-go@v5 19 with: 20 go-version: "stable" 21 cache: true 22 23 - name: Cache glot binary 24 - uses: actions/cache@v4 25 id: cache-glot 26 with: 27 path: ~/go/bin/glot ··· 40 runs-on: ubuntu-latest 41 steps: 42 - name: Checkout code 43 - uses: actions/checkout@v4 44 45 - name: Setup Go 46 - uses: actions/setup-go@v5 47 with: 48 go-version: "stable" 49 cache: true 50 51 - name: Cache glot binary 52 - uses: actions/cache@v4 53 id: cache-glot 54 with: 55 path: ~/go/bin/glot
··· 12 runs-on: ubuntu-latest 13 steps: 14 - name: Checkout code 15 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 16 17 - name: Setup Go 18 + uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0 19 with: 20 go-version: "stable" 21 cache: true 22 23 - name: Cache glot binary 24 + uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0 25 id: cache-glot 26 with: 27 path: ~/go/bin/glot ··· 40 runs-on: ubuntu-latest 41 steps: 42 - name: Checkout code 43 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 44 45 - name: Setup Go 46 + uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0 47 with: 48 go-version: "stable" 49 cache: true 50 51 - name: Cache glot binary 52 + uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0 53 id: cache-glot 54 with: 55 path: ~/go/bin/glot
+15 -15
.github/workflows/pr.yml
··· 12 formatting: 13 runs-on: ubuntu-latest 14 steps: 15 - - uses: actions/checkout@v4 16 17 - name: Install pnpm 18 - uses: pnpm/action-setup@v4 19 20 - name: Setup Node.js environment 21 - uses: actions/setup-node@v4 22 with: 23 node-version-file: .nvmrc 24 cache: "pnpm" ··· 30 test: 31 runs-on: ubuntu-latest 32 steps: 33 - - uses: actions/checkout@v4 34 with: 35 fetch-depth: 0 36 filter: "blob:none" 37 38 - name: Cache turbo build setup 39 - uses: actions/cache@v4 40 with: 41 path: .turbo 42 key: ${{ runner.os }}-turbo-${{ github.sha }} ··· 44 ${{ runner.os }}-turbo- 45 46 - name: Install pnpm 47 - uses: pnpm/action-setup@v4 48 49 - name: Setup Node.js environment 50 - uses: actions/setup-node@v4 51 with: 52 node-version-file: .nvmrc 53 cache: "pnpm" ··· 58 lint: 59 runs-on: ubuntu-latest 60 steps: 61 - - uses: actions/checkout@v4 62 with: 63 fetch-depth: 0 64 filter: "blob:none" 65 66 - name: Cache turbo build setup 67 - uses: actions/cache@v4 68 with: 69 path: .turbo 70 key: ${{ runner.os }}-turbo-${{ github.sha }} ··· 72 ${{ runner.os }}-turbo- 73 74 - name: Install pnpm 75 - uses: pnpm/action-setup@v4 76 77 - name: Setup Node.js environment 78 - uses: actions/setup-node@v4 79 with: 80 node-version-file: .nvmrc 81 cache: "pnpm" ··· 86 typecheck: 87 runs-on: ubuntu-latest 88 steps: 89 - - uses: actions/checkout@v4 90 with: 91 fetch-depth: 0 92 filter: "blob:none" 93 94 - name: Cache turbo build setup 95 - uses: actions/cache@v4 96 with: 97 path: .turbo 98 key: ${{ runner.os }}-turbo-${{ github.sha }} ··· 100 ${{ runner.os }}-turbo- 101 102 - name: Install pnpm 103 - uses: pnpm/action-setup@v4 104 105 - name: Setup Node.js environment 106 - uses: actions/setup-node@v4 107 with: 108 node-version-file: .nvmrc 109 cache: "pnpm"
··· 12 formatting: 13 runs-on: ubuntu-latest 14 steps: 15 + - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 16 17 - name: Install pnpm 18 + uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 19 20 - name: Setup Node.js environment 21 + uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0 22 with: 23 node-version-file: .nvmrc 24 cache: "pnpm" ··· 30 test: 31 runs-on: ubuntu-latest 32 steps: 33 + - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 34 with: 35 fetch-depth: 0 36 filter: "blob:none" 37 38 - name: Cache turbo build setup 39 + uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0 40 with: 41 path: .turbo 42 key: ${{ runner.os }}-turbo-${{ github.sha }} ··· 44 ${{ runner.os }}-turbo- 45 46 - name: Install pnpm 47 + uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 48 49 - name: Setup Node.js environment 50 + uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0 51 with: 52 node-version-file: .nvmrc 53 cache: "pnpm" ··· 58 lint: 59 runs-on: ubuntu-latest 60 steps: 61 + - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 62 with: 63 fetch-depth: 0 64 filter: "blob:none" 65 66 - name: Cache turbo build setup 67 + uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0 68 with: 69 path: .turbo 70 key: ${{ runner.os }}-turbo-${{ github.sha }} ··· 72 ${{ runner.os }}-turbo- 73 74 - name: Install pnpm 75 + uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 76 77 - name: Setup Node.js environment 78 + uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0 79 with: 80 node-version-file: .nvmrc 81 cache: "pnpm" ··· 86 typecheck: 87 runs-on: ubuntu-latest 88 steps: 89 + - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 90 with: 91 fetch-depth: 0 92 filter: "blob:none" 93 94 - name: Cache turbo build setup 95 + uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0 96 with: 97 path: .turbo 98 key: ${{ runner.os }}-turbo-${{ github.sha }} ··· 100 ${{ runner.os }}-turbo- 101 102 - name: Install pnpm 103 + uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 104 105 - name: Setup Node.js environment 106 + uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0 107 with: 108 node-version-file: .nvmrc 109 cache: "pnpm"
+1 -1
.github/workflows/tangled.yml
··· 12 runs-on: ubuntu-latest 13 environment: tangled-sync 14 steps: 15 - - uses: actions/checkout@v4.1.7 16 with: 17 fetch-depth: 0 18 ref: ${{ github.event.pull_request.head.sha }}
··· 12 runs-on: ubuntu-latest 13 environment: tangled-sync 14 steps: 15 + - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 16 with: 17 fetch-depth: 0 18 ref: ${{ github.event.pull_request.head.sha }}