From 9af76b88af16ab5fb74d52238ea7bb836ed0935b Mon Sep 17 00:00:00 2001 From: rldyourmnd Date: Tue, 15 Sep 2026 04:31:34 +0500 Subject: [PATCH] chore(ci): pin reusable workflows to current module mains Point callers at ci-workflows 9eb9e07 and github-actions 6064b7d. Dependabot PRs targeting a624689/c113d4c would regress extra-approval. Co-authored-by: Cursor --- .github/workflows/ci-feedback-events.yml | 2 +- .github/workflows/codeql.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci-feedback-events.yml b/.github/workflows/ci-feedback-events.yml index 94977cd..1e1f96a 100644 --- a/.github/workflows/ci-feedback-events.yml +++ b/.github/workflows/ci-feedback-events.yml @@ -19,7 +19,7 @@ jobs: permissions: actions: read # Read exact completed run and job metadata. issues: write # Publish bounded failure evidence in this repository. - uses: NDDev-OpenNetwork/github-actions/.github/workflows/ci-feedback.yml@a0dc5592333dcfdf2a3d239ed1f2b128899e5482 # commit:a0dc5592333dcfdf2a3d239ed1f2b128899e5482 + uses: NDDev-OpenNetwork/github-actions/.github/workflows/ci-feedback.yml@6064b7d98a4e6b852de7572de12b8889e8fbfe38 # commit:6064b7d98a4e6b852de7572de12b8889e8fbfe38 with: run-id: ${{ format('{0}', github.event.workflow_run.id) }} run-attempt: ${{ format('{0}', github.event.workflow_run.run_attempt) }} diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 30d1414..ce39101 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -31,7 +31,7 @@ jobs: actions: read contents: read security-events: write - uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/public-codeql.yml@409817cf743e76383c84e30c72edf781d73b71a1 # 0.1.11 + uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/public-codeql.yml@9eb9e070ae87b0fc3bdbd2cbed5afe3b92f7e2c7 # 9eb9e07 with: # Public repository: `pull_request` runs untrusted fork code. Name the # hosted runner explicitly — the reusable's default belongs to the pinned