This is an automated email from the ASF dual-hosted git repository.

LiteSun pushed a commit to branch ci/pin-pnpm-action-setup
in repository https://gitbox.apache.org/repos/asf/apisix-dashboard.git

commit 25b3f511ca6e75606fd9a23e122c382194a35177
Author: LiteSun <[email protected]>
AuthorDate: Wed Oct 14 14:36:18 2026 +0800

    ci: pin pnpm/action-setup to a commit hash
    
    Apache Infra requires third-party actions to be referenced by hash
    (https://infra.apache.org/github-actions-policy.html). Pin both uses to
    the approved v6.1.0 commit; the existing dependabot github-actions
    config keeps the hash up to date.
    
    Fixes #3468
    
    Co-Authored-By: Claude Opus 5.5 <[email protected]>
---
 .github/workflows/e2e.yml  | 2 +-
 .github/workflows/lint.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index b6077d18e..b742727d0 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -45,7 +45,7 @@ jobs:
         shell: bash
 
       # ensure this in 
https://github.com/apache/infrastructure-actions/blob/main/actions.yml
-      - uses: pnpm/action-setup@v5
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # 
v6.1.0
         name: Install pnpm
         with:
           run_install: false
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 3cfd9c82e..a2624bdf9 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -18,7 +18,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # 
v6.1.0
         name: Install pnpm
         with:
           run_install: false

Reply via email to