## Summary
Pin `actions/checkout@v6` →
`actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1` in
`deepagents-example.yml.example`.
All other workflows and composite actions in the repo were already
SHA-pinned. This completes coverage for every third-party action
reference in `.github/`.
## Why
SHA-pinning third-party GitHub Actions is a supply-chain security best
practice recommended by GitHub and security scanners. Tag-based
references (`@v6`) are mutable — a compromised maintainer account or
stolen token can push malicious code under the same tag. SHA-pinned
references are immutable.
## Notes
The `langchain-ai/deepagents@main` self-reference in the example
template is intentionally left unpinned — it is a template file
(`.example` suffix) for downstream consumers, not a live workflow.
Co-authored-by: Deep Agent <agent@deepagents.dev>
Consolidate evals documentation into the root `libs/evals/README.md` and
clean up stale CI/labeler config. The evals docs were split across three
files (`README.md`, `tests/evals/README.md`,
`docs/plan-evals-cli-mode.md`) with duplicated content — this collapses
everything into one canonical reference and replaces the inner README
with a short pointer.
## Changes
- Rewrite `libs/evals/README.md` with quick-start, architecture
(two-tier assertion model, key modules, test suite catalog), eval
authoring guide, report format, category system, and Harbor/TB2 sections
— absorbing content previously in `tests/evals/README.md`
- Reduce `tests/evals/README.md` to a directory-layout index that links
back to the root README
- Delete `docs/plan-evals-cli-mode.md` — shipped planning doc for
CLI-mode eval support, no longer needed
- Add `quickjs` scope to `pr-labeler-config.json` and fix `cli-gha`
mapping from `"cli"` to `"github_actions"`
- Rename `deepagents-example.yml` to `deepagents-example.yml.example` so
GitHub Actions doesn't pick it up as a live workflow
- Fix stale line-anchor link in `PULL_REQUEST_TEMPLATE.md` and update
`LANGSMITH_TRACING_V2` references to `LANGSMITH_TRACING`
John Kennedy