Mason Daugherty fa45cd95b1 ci(infra): align pinned action SHAs in setup-and-build composite action (#2535) ...

The `setup-and-build` composite action pinned older SHAs for
`pnpm/action-setup`, `actions/setup-node`, and
`actions/download-artifact` than the workflows that consume it
(`ci.yml`, `release.yml`, etc.). Standardizing on the workflows' SHAs
leaves one pinned commit per action across the repo — same major
versions, just the newer (gh-verified) SHAs already running in CI.

## Changes
- Repoint the composite action's three `uses:` lines to the SHAs the
workflows already use: `pnpm/action-setup` v4 → `0e279bb9`,
`actions/setup-node` v6 → `48b55a01`, `actions/download-artifact` v4 →
`3e5f45b2`.

2026-06-12 21:29:58 -04:00

..

actions/setup-and-build

ci(infra): align pinned action SHAs in setup-and-build composite action (#2535)

2026-06-12 21:29:58 -04:00

images

Add files via upload

2026-03-02 12:06:42 -05:00

ISSUE_TEMPLATE

chore: docs template gh link (#1630)

2025-09-09 22:31:10 +00:00

workflows

chore(deps): bump dorny/paths-filter from 3.0.2 to 4.0.1 in the major group across 1 directory (#2475)

2026-06-03 11:38:35 -07:00

dependabot.yml

chore: fix dependabot — single root entry with ecosystem groups (#2152)

2026-03-10 12:42:50 -07:00

pull_request_template.md

Fix up some issues (#6)

2024-01-16 13:46:58 -08:00