You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@bifromq.apache.org by "raboof (via GitHub)" <gi...@apache.org> on 2026/08/22 09:56:29 UTC
[I] Introduce automation to keep `pnpm/action-setup` up-to-date [bifromq-sites]
raboof opened a new issue, #89:
URL: https://github.com/apache/bifromq-sites/issues/89
Hello! This issue was created semi-automatically because this repo popped up in a search. Per https://infra.apache.org/github-actions-policy.html, 3rd-party actions such as `pnpm/action-setup` must be referred to by hash and kept up-to-date by automation such as dependabot. It looks like this repo does not pollow this policy yet.
We plan to start enforcing this policy for `pnpm/action-setup` through https://github.com/apache/infrastructure-actions/pull/1193 .
If this was a false posivite, you can close this issue. Otherwise, you likely want to update your workflows, since they will stop working once that PR is merged.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@bifromq.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Introduce automation to keep `pnpm/action-setup` up-to-date [bifromq-sites]
Posted by "visoar (via GitHub)" <gi...@apache.org>.
visoar closed issue #89: Introduce automation to keep `pnpm/action-setup` up-to-date
URL: https://github.com/apache/bifromq-sites/issues/89
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@bifromq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Introduce automation to keep `pnpm/action-setup` up-to-date [bifromq-sites]
Posted by "visoar (via GitHub)" <gi...@apache.org>.
visoar commented on issue #89:
URL: https://github.com/apache/bifromq-sites/issues/89#issuecomment-5379699553
Resolved by #90.
The deployment workflow now pins both external actions to reviewed commit SHAs, and weekly Dependabot updates are enabled for the GitHub Actions ecosystem. The pinned commits were verified upstream, and the full repository CI passed after the change.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@bifromq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org