[PR] ci: Pin external actions to commit hashes [mynewt-core]

["sjanc (via GitHub)" <gi...@apache.org>]

sjanc opened a new pull request, #3824:
URL: https://github.com/apache/mynewt-core/pull/3824

   ASF GitHub Actions Policy requires external actions to be pinned to a specific git hash. Only actions from apache/*, github/* and actions/* namespaces may use tags, and Infra recommends major version tags for those, which is already the case.
   
   Pin carlosperate/arm-none-eabi-gcc-action, codelytv/pr-size-labeler and peter-evans/create-pull-request to commit hashes of currently used releases, with version in comment. Dependabot updates both hash and comment.
   
   Assisted-by: Claude:claude-opus-5-5


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@mynewt.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] ci: Pin external actions to commit hashes [mynewt-core]

["sjanc (via GitHub)" <gi...@apache.org>]

sjanc merged PR #3824:
URL: https://github.com/apache/mynewt-core/pull/3824


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@mynewt.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org