From ad6d97d5381745070e1df2b78f3877df7d610706 Mon Sep 17 00:00:00 2001 From: Pieter Noordhuis Date: Wed, 25 Mar 2026 12:23:37 +0100 Subject: [PATCH] Fix actions/github-script pin to match tagged v8.0.0 release Dependabot PR #4413 incorrectly changed the SHA from the tagged v8.0.0 release (ed597411d8f9) to the untagged main branch HEAD (450193c5abd4). Revert to the correct tagged SHA. Co-authored-by: Isaac --- .github/workflows/release.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index b425fa546a..b53af55ed3 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -199,7 +199,7 @@ jobs: echo "VERSION=${VERSION:1}" >> $GITHUB_ENV - name: Update setup-cli - uses: actions/github-script@450193c5abd4cdb17ba9f3ffcfe8f635c4bb6c2a # v8.0.0 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 with: github-token: ${{ secrets.DECO_GITHUB_TOKEN }} script: | @@ -227,7 +227,7 @@ jobs: echo "VERSION=${VERSION:1}" >> $GITHUB_ENV - name: Update homebrew-tap - uses: actions/github-script@450193c5abd4cdb17ba9f3ffcfe8f635c4bb6c2a # v8.0.0 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 with: github-token: ${{ secrets.DECO_GITHUB_TOKEN }} script: | @@ -268,7 +268,7 @@ jobs: echo "VERSION=${VERSION:1}" >> $GITHUB_ENV - name: Update CLI version in the VSCode extension - uses: actions/github-script@450193c5abd4cdb17ba9f3ffcfe8f635c4bb6c2a # v8.0.0 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 with: github-token: ${{ secrets.DECO_GITHUB_TOKEN }} script: |