Skip to content

chore(deps): update stranske/workflows digest to c2537cc #2000

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
renovate wants to merge 1 commit into from
Closed

chore(deps): update stranske/workflows digest to c2537cc #2000

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/agents-guard.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -111,7 +111,7 @@ jobs:
github.event_name == 'pull_request_target' &&
steps.eligibility.outputs.should-run == 'true' &&
steps.api_client_base.outputs.available != 'true'
uses: "stranske/Workflows/.github/actions/setup-api-client@d68de1904bcdbe16bfe2462b73aa18f41f8a0a47" # v1
uses: "stranske/Workflows/.github/actions/setup-api-client@c2537cc959f2ce05926c4639d25b90678abc97bc" # v1

@coderabbitai coderabbitai Bot Jun 20, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Check if this repo has a sync manifest that should manage agents-guard.yml

echo "=== Checking for sync configuration ==="
fd -t f 'sync-manifest' -E node_modules

echo ""
echo "=== Checking if agents-guard.yml is listed in any sync config ==="
rg -l 'agents-guard' --glob '*.yml' --glob '*.yaml' -g '!.github/workflows/*' || echo "No sync references found"

echo ""
echo "=== Checking Renovate config for action pin patterns ==="
fd -t f 'renovate' -e json -e json5 --exec cat {} \; 2>/dev/null | head -50 || echo "No Renovate config found"

Repository: stranske/Portable-Alpha-Extension-Model

Length of output: 273

🏁 Script executed:

#!/bin/bash
# Check if agents-guard.yml has sync metadata
echo "=== agents-guard.yml content (first 30 lines) ==="
head -30 .github/workflows/agents-guard.yml

echo ""
echo "=== Check for sync markers in agents-guard.yml ==="
grep -i "sync\|auto.*generated\|managed" .github/workflows/agents-guard.yml | head -5 || echo "No sync markers found"

Repository: stranske/Portable-Alpha-Extension-Model

Length of output: 1191

🏁 Script executed:

#!/bin/bash
# Check if agents-guard.yml exists in source repo
echo "=== Checking if agents-guard.yml exists in Workflows repo ==="
ls -la .github/workflows/agents-guard.yml 2>/dev/null || echo "File not found in Workflows repo"

echo ""
echo "=== Checking sync-manifest.yml for agents-guard ==="
if [ -f .github/sync-manifest.yml ]; then
  grep -A 5 -B 5 'agents-guard' .github/sync-manifest.yml || echo "agents-guard not in sync manifest"
else
  echo "sync-manifest.yml not found"
fi

Repository: stranske/Workflows

Length of output: 1916

Do not edit synced workflows locally — update the source in stranske/Workflows instead.

agents-guard.yml is a synced file per .github/sync-manifest.yml in stranske/Workflows. Local edits to synced files in the consumer repository will be overwritten on the next sync operation. The SHA pin update for setup-api-client (d68de19 → c2537cc) should be applied to the source workflow in stranske/Workflows and will propagate automatically through the sync mechanism.

The SHA change itself is consistent across both trigger paths (lines 114 and 183), and the action interface remains compatible per the linked repository findings.

🤖 Prompt for AI Agents 
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.github/workflows/agents-guard.yml at line 114, The `agents-guard.yml` file
is a synced workflow that should not be edited locally. Revert the SHA pin
change for the `setup-api-client` action back to the original value (`d68de19`)
in this file. Instead, apply the SHA update (`d68de19` → `c2537cc`) to the
source workflow in the `stranske/Workflows` repository, where it will propagate
automatically through the sync mechanism defined in `.github/sync-manifest.yml`.

Source: Coding guidelines

with:
secrets: ${{ toJSON(secrets) }}
github_token: ${{ github.token }}
Expand Down Expand Up @@ -180,7 +180,7 @@ jobs:
steps.eligibility.outputs.should-run == 'true' &&
github.event_name == 'pull_request' &&
steps.api_client_head.outputs.available != 'true'
uses: "stranske/Workflows/.github/actions/setup-api-client@d68de1904bcdbe16bfe2462b73aa18f41f8a0a47" # v1
uses: "stranske/Workflows/.github/actions/setup-api-client@c2537cc959f2ce05926c4639d25b90678abc97bc" # v1
with:
secrets: ${{ toJSON(secrets) }}
github_token: ${{ github.token }}
Expand Down
Loading