Enable Renovate for GitHub Actions and pin actions to SHAs - #787
Conversation
|
/retest |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: abays, stuggi The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
Build succeeded (gate pipeline). ✔️ noop SUCCESS in 0s |
|
Pull request merge failed: Resource not accessible by integration, You may need to manually rebase your PR and retry. |
d06f07e to
4eeab70
Compare
|
New changes are detected. LGTM label has been removed. |
|
rebased |
|
recheck-gate |
|
Build succeeded (gate pipeline). ✔️ noop SUCCESS in 0s |
|
Pull request merge failed: Resource not accessible by integration, You may need to manually rebase your PR and retry. |
Add Renovate config to automatically bump GitHub Actions on main and stable branches. Pin all action references to immutable commit SHAs to prevent supply-chain attacks via mutable tags. Also bumps actions/checkout and actions/setup-python from v2 to v4/v5 in docs.yaml. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Signed-off-by: Martin Schuppert <mschuppert@redhat.com>
4eeab70 to
7c42a92
Compare
|
New changes are detected. LGTM label has been removed. |
|
/retest |
|
recheck-gate |
|
Build succeeded (gate pipeline). ✔️ noop SUCCESS in 0s |
|
Pull request merge failed: Resource not accessible by integration, You may need to manually rebase your PR and retry. |
|
Merging manually due to seeming Zuul instability. |
2 participants
Add Renovate config to automatically bump GitHub Actions on main and stable branches. Pin all action references to immutable commit SHAs to prevent supply-chain attacks via mutable tags.
Also bumps actions/checkout and actions/setup-python from v2 to v4/v5 in docs.yaml.