Skip to content

chore(deps): update stranske/workflows digest to de0849c #2518

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
renovate wants to merge 1 commit into from
Closed

chore(deps): update stranske/workflows digest to de0849c #2518

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions templates/consumer-repo/.github/workflows/agents-guard.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -111,7 +111,7 @@ jobs:
github.event_name == 'pull_request_target' &&
steps.eligibility.outputs.should-run == 'true' &&
steps.api_client_base.outputs.available != 'true'
uses: "stranske/Workflows/.github/actions/setup-api-client@a335f1af2c35b8f35d2278f56e9af78792a09bf1" # v1
uses: "stranske/Workflows/.github/actions/setup-api-client@de0849c19ac81e04dc4b1ce6f95c6ec53a4db945" # v1

@coderabbitai coderabbitai Bot Jun 23, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🗄️ Data Integrity & Integration | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Verify both the template and main workflow reference the SAME setup-api-client SHA.
echo "== template occurrences =="
rg -n 'setup-api-client@' templates/consumer-repo/.github/workflows/agents-guard.yml

echo "== main workflow occurrences =="
fd -t f 'agents-guard.yml' .github/workflows --exec rg -n 'setup-api-client@' {}

echo "== any lingering old SHA a335f1a anywhere in repo =="
rg -n 'a335f1a' || echo "no old SHA references found"

Repository: stranske/Workflows

Length of output: 758

🏁 Script executed:

#!/bin/bash
# Confirm the pinned commit exists on stranske/Workflows and inspect tag association.
gh api repos/stranske/Workflows/commits/de0849c19ac81e04dc4b1ce6f95c6ec53a4db945 \
  --jq '{sha: .sha, date: .commit.committer.date, message: .commit.message}'

echo "== tags pointing near this commit =="
gh api repos/stranske/Workflows/tags --jq '.[] | {name: .name, sha: .commit.sha}'

Repository: stranske/Workflows

Length of output: 1239

Update main workflow to match template SHA — currently at parity drift.

The template (lines 114, 183) was updated to de0849c19ac81e04dc4b1ce6f95c6ec53a4db945, but the main workflow at .github/workflows/agents-guard.yml (lines 103, 173) still references the old SHA a335f1af2c35b8f35d2278f56e9af78792a09bf1. Per coding guidelines, "Any change to workflows that consumers use must be reflected in BOTH .github/workflows/ (main workflow) and templates/consumer-repo/.github/workflows/ (template)".

The new SHA is valid (verified on stranske/Workflows, tagged v1.17.2), but both files must be synchronized before merge.

🤖 Prompt for AI Agents 
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@templates/consumer-repo/.github/workflows/agents-guard.yml` at line 114,
Update the main workflow file at `.github/workflows/agents-guard.yml` to use the
new SHA for the setup-api-client action. Find the uses statement for
stranske/Workflows/.github/actions/setup-api-client at lines 103 and 173 that
currently references the old SHA a335f1af2c35b8f35d2278f56e9af78792a09bf1, and
replace it with the new SHA de0849c19ac81e04dc4b1ce6f95c6ec53a4db945 to match
what is already in the template file, ensuring both workflow files are
synchronized before merge.

Source: Coding guidelines

with:
secrets: ${{ toJSON(secrets) }}
github_token: ${{ github.token }}
Expand Down Expand Up @@ -180,7 +180,7 @@ jobs:
steps.eligibility.outputs.should-run == 'true' &&
github.event_name == 'pull_request' &&
steps.api_client_head.outputs.available != 'true'
uses: "stranske/Workflows/.github/actions/setup-api-client@a335f1af2c35b8f35d2278f56e9af78792a09bf1" # v1
uses: "stranske/Workflows/.github/actions/setup-api-client@de0849c19ac81e04dc4b1ce6f95c6ec53a4db945" # v1
with:
secrets: ${{ toJSON(secrets) }}
github_token: ${{ github.token }}
Expand Down
Loading