Mason Daugherty d879d1c979 ci(infra): pin actions/checkout to commit SHA in release workflow (#596) ...

The `build` job in the CLI release workflow referenced
`actions/checkout@v6` by tag while every other action across the repo's
workflows is pinned to a full commit SHA. Pinning it closes the one
remaining mutable-tag reference so CI can't silently pull a re-tagged
action.

## Changes
- Pin `actions/checkout` in the `cli-release.yml` `build` job to
`8e8c483…90e8` (`v6.0.1`) — the same SHA used by the repo's other
checkout steps.

2026-06-12 21:19:12 -04:00

..

images

Add files via upload

2026-03-02 11:36:35 -05:00

workflows

ci(infra): pin actions/checkout to commit SHA in release workflow (#596)

2026-06-12 21:19:12 -04:00

dependabot.yml

chore: update dependabot schedule to monthly

2026-03-25 11:05:46 -07:00