Skip to content

Pin GitHub Action version comments to exact tags - #1246

Closed
nedtwigg wants to merge 1 commit into
mainfrom
fix-rust-cache-pin-comment
Closed

nedtwigg wants to merge 1 commit into
mainfrom
fix-rust-cache-pin-comment

Conversation

@nedtwigg

Copy link
Copy Markdown
Member

Fixes the red Workflow Lint / zizmor job on main (run):

ci.yml:403: action's hash pin has mismatched or missing version comment: tag points to commit d1527c8f67ef

swatinem/rust-cache moved its v2 tag to v2.9.3, so the pin 6323deb… # v2 (that SHA is v2.9.2) no longer matches its comment. No code changed on our side; the upstream tag moved.

The comment now names the exact tag. tauri-action (# v1 → # v1.0.0) and neondatabase/create-branch-action (# v6 → # 6.3.1, the upstream tag has no v) had the same major-only comment, so they get the same change before their next release breaks them too. No pinned SHA changes.

Verified locally: zizmor@1.30.1 (online, as CI runs it) reports no findings, and scripts/workflow-lint.mjs passes.

🤖 Generated with Claude Code

zizmor's ref-version-mismatch check fails when a hash pin's comment names a
tag that no longer points at the pinned commit. swatinem/rust-cache moved its
`v2` tag to v2.9.3, so `6323deb # v2` (v2.9.2) turned main's Workflow Lint red.
tauri-action and neon create-branch-action carried the same major-only comment
and would break the same way on their next release.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@cloudflare-workers-and-pages

Copy link
Copy Markdown

Deploying mouseterm with  Cloudflare Pages  Cloudflare Pages

Latest commit: a788883
Status: ✅  Deploy successful!
Preview URL: https://cf95befa.mouseterm.pages.dev
Branch Preview URL: https://fix-rust-cache-pin-comment.mouseterm.pages.dev

View logs

@dormouse-bot dormouse-bot left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a byte-identical diff to #1236 (opened earlier by this bot for the same zizmor failure). One of the two can be closed as a duplicate.

@nedtwigg

Copy link
Copy Markdown
Member Author

great minds think alike lol

@nedtwigg nedtwigg closed this Oct 20, 2026

This branch is waiting to be deployed

1 waiting deployment
hosted-preview — a7888835 Waiting Oct 20, 2026 by nedtwigg via deploy #1651
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants