Skip to content

Pin Process-PSModule workflow reference to immutable SHA#15

Merged
Marius Storhaug (MariusStorhaug) merged 1 commit intomainfrom
fix/pin-process-psmodule-sha
Apr 5, 2026
Merged

Pin Process-PSModule workflow reference to immutable SHA#15
Marius Storhaug (MariusStorhaug) merged 1 commit intomainfrom
fix/pin-process-psmodule-sha

Conversation

@MariusStorhaug
Copy link
Copy Markdown
Member

The CI workflow reference is now pinned to a specific commit SHA, consistent with all other uses: references in the PSModule infrastructure. Dependabot will automatically propose updates when new versions of Process-PSModule are released.

Changed: Workflow reference pinned to immutable SHA

The Process-PSModule reusable workflow reference in .github/workflows/Process-PSModule.yml was using a mutable major version tag (@v5). It is now pinned to the exact commit SHA with the patch-level version in a trailing comment:

# Before
uses: PSModule/Process-PSModule/.github/workflows/workflow.yml@v5

# After
uses: PSModule/Process-PSModule/.github/workflows/workflow.yml@4343d76f9e8c9468527175ea292092c2d055be8c # v5.4.5

Dependabot's github-actions ecosystem is already configured and will keep this reference up to date automatically.

Copilot AI review requested due to automatic review settings April 4, 2026 23:11
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Pins the reusable Process-PSModule GitHub Actions workflow reference to an immutable commit SHA to prevent unexpected changes from mutable tags and align with the repository’s workflow dependency practices.

Changes:

  • Replaced the @v5 workflow reference with a full commit SHA.
  • Added a trailing comment noting the corresponding patch version (v5.4.5).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@MariusStorhaug Marius Storhaug (MariusStorhaug) merged commit 8a3fb0e into main Apr 5, 2026
6 checks passed
@MariusStorhaug Marius Storhaug (MariusStorhaug) deleted the fix/pin-process-psmodule-sha branch April 5, 2026 00:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants