Skip to content

docs: document SHA-pinned URLs for flint task consumption#20

Merged
zeitlinger merged 1 commit intomainfrom
pin
Feb 16, 2026
Merged

docs: document SHA-pinned URLs for flint task consumption#20
zeitlinger merged 1 commit intomainfrom
pin

Conversation

@zeitlinger
Copy link
Copy Markdown
Member

Summary

  • Update README usage examples to show commit SHA pinning with version comments (e.g., # v0.3.0) instead of tag-based URLs
  • Update Renovate shared preset (default.json) to match SHA-pinned URLs with currentDigest + currentValue instead of tag-in-path
  • Explain why SHA pins are preferred (immutable vs force-pushable tags)

Test plan

  • Verify the regex in default.json matches the URL format shown in the README example
  • Verify consuming repos using extends: ["github>grafana/flint"] pick up the new custom manager

Update README and Renovate shared preset to use commit SHA pinning
(with version comment) instead of tag-based URLs.
Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>
Copilot AI review requested due to automatic review settings February 16, 2026 18:41
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the documentation and Renovate configuration to use SHA-pinned URLs instead of tag-based URLs for flint task consumption. The change improves immutability by pinning to commit SHAs while using version comments (e.g., # v0.3.0) to inform Renovate of the current version.

Changes:

  • Updated Renovate shared preset regex to match SHA-pinned URLs with version comments instead of tag-in-path URLs
  • Updated README usage examples to demonstrate SHA pinning with the 30090d5540807f330a94420ad11b57ba93eaaa84 commit (v0.3.0)
  • Added clear explanation of why SHA pins are preferred over force-pushable tags

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
default.json Updated Renovate custom manager regex to capture commit SHA and version from comment instead of version tag from URL path
README.md Updated all usage examples to show SHA-pinned URLs, added explanations for the pattern, and included git rev-parse command for finding SHAs

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@zeitlinger zeitlinger merged commit 25409d2 into main Feb 16, 2026
14 checks passed
@zeitlinger zeitlinger deleted the pin branch February 16, 2026 18:46
@zeitlinger zeitlinger restored the pin branch February 16, 2026 19:06
@zeitlinger zeitlinger deleted the pin branch February 16, 2026 19:12
This was referenced Apr 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants