Skip to content

Change GitHub Action digest pinning strategy to semver - #121

Open
thompson-tomo wants to merge 1 commit into
open-feature:mainfrom
thompson-tomo:patch-1
Open

Change GitHub Action digest pinning strategy to semver#121
thompson-tomo wants to merge 1 commit into
open-feature:mainfrom
thompson-tomo:patch-1

Conversation

@thompson-tomo

@thompson-tomo thompson-tomo commented Aug 1, 2026 •
edited
Loading

Copy link
Copy Markdown

This PR

  • switches github action pinning to semver which forces all actions to appear as @{{digest}} # vX.Y.Z instead of @{{digest}} # vX or however it was defined. It also enables updates to be correctly classified as patch/minor rather than just digest
  • this improves readabiloty

Notes

see config option defined at https://docs.renovatebot.com/presets-helpers/

a number of occurrences are already pinning to semver but others don’t

@thompson-tomo
Change GitHub Action digest pinning strategy
09aa182 
Signed-off-by: James Thompson <thompson.tomo@outlook.com>
@coderabbitai

coderabbitai Bot commented Aug 1, 2026 •
edited
Loading

Copy link
Copy Markdown

Review Change Stack

📝 Walkthrough

Walkthrough

The Renovate helper preset in default.json now uses semver-based GitHub Action digest pinning.

Changes

Renovate preset update

Layer / File(s) Summary
Update GitHub Action digest preset
default.json		 Replaces helpers:pinGitHubActionDigests with helpers:pinGitHubActionDigestsToSemver.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Title check ✅ Passed The title clearly describes the change to the GitHub Action digest pinning strategy.
Description check ✅ Passed The description explains the semver pinning change and its effect on version display and update classification.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@thompson-tomo