Commit history

1. Commits on Oct 21, 2026

   • Warn about container images the lockfile can't pin (#220)

     Show description for b2188ce
     

     nodeselector

     and

     Copilot

     authored
     b2188ceView commit details

     Copy full SHA for b2188ce

     Browse repository at this point

   • Report unverifiable pins as retryable errors (#209)

     Show description for 8ebefb8
     

     nodeselector

     and

     Copilot

     authored
     8ebefb8View commit details

     Copy full SHA for 8ebefb8

     Browse repository at this point

   • Advise --relock for composite-held exact tags behind their commit (#221)

     Show description for 5a1469a
     

     nodeselector

     and

     Copilot

     authored
     5a1469aView commit details

     Copy full SHA for 5a1469a

     Browse repository at this point

   • Prove every own-SHA rewrite and check reused composites' children (#215)

     Show description for a0a7edc
     

     nodeselector

     and

     Copilot

     authored
     a0a7edcView commit details

     Copy full SHA for a0a7edc

     Browse repository at this point

   • Block exact tags locked behind their commit (#208)

     Show description for 4cc8e2b
     

     nodeselector

     and

     Copilot

     authored
     4cc8e2bView commit details

     Copy full SHA for 4cc8e2b

     Browse repository at this point

   • Verify and rebuild complete transitive lock graphs (#214)

     Show description for 723eebc
     

     nodeselector

     and

     Copilot

     authored
     723eebcView commit details

     Copy full SHA for 723eebc

     Browse repository at this point

   • Bound and classify GitHub API retries (#207)

     Show description for 2173763
     

     nodeselector

     and

     Copilot

     authored
     2173763View commit details

     Copy full SHA for 2173763

     Browse repository at this point

   • Keep lockfiles that record a tag containing @ loadable (#217)

     Show description for 1370c18
     

     nodeselector

     and

     Copilot

     authored
     1370c18View commit details

     Copy full SHA for 1370c18

     Browse repository at this point

   • Verify locked manifests in online runs that keep recorded pins (#212)

     Show description for 748cba9
     

     nodeselector

     and

     Copilot

     authored
     748cba9View commit details

     Copy full SHA for 748cba9

     Browse repository at this point

   • Spell full SHAs one way in the lockfile (#213)

     Show description for d2a970a
     

     nodeselector

     and

     Copilot

     authored
     d2a970aView commit details

     Copy full SHA for d2a970a

     Browse repository at this point

   • Bump the go-minor-and-patch group with 3 updates (#206)

     Show description for 2a30e48
     dependabot[bot]

     authored
     2a30e48View commit details

     Copy full SHA for 2a30e48

     Browse repository at this point

   • Skip cooldown diagnostics in read-only checks (#204)

     Show description for 5517160
     

     nodeselector

     and

     Copilot

     authored
     5517160View commit details

     Copy full SHA for 5517160

     Browse repository at this point

   • Clarify warnings for tags ahead of locked commits (#205)

     Show description for d549b67
     

     nodeselector

     and

     Copilot

     authored
     d549b67View commit details

     Copy full SHA for d549b67

     Browse repository at this point
2. Commits on Oct 20, 2026

   • Preserve SSO guidance in concise terminal errors (#203)

     Show description for 817f1d4
     

     nodeselector

     and

     Copilot

     authored
     817f1d4View commit details

     Copy full SHA for 817f1d4

     Browse repository at this point

   • Repair lock entries that record their own SHA as the ref (#198)

     nodeselector

     authored
     dacafb7View commit details

     Copy full SHA for dacafb7

     Browse repository at this point

   • Decide parity findings in one disposition step; keep unreplaced pins blocking (#197)

     nodeselector

     authored
     ec26bdcView commit details

     Copy full SHA for ec26bdc

     Browse repository at this point

   • Trace every locked commit to its recorded ref (#186)

     Show description for 8bb4bb6
     

     nodeselector

     and

     Copilot

     authored
     8bb4bb6View commit details

     Copy full SHA for 8bb4bb6

     Browse repository at this point

   • Include actions in parallel step groups in the lockfile (#176)

     Show description for 582fee1
     

     3 peopleauthored
     582fee1View commit details

     Copy full SHA for 582fee1

     Browse repository at this point

   • Fix Windows test issues (#177)

     Show description for ba37813
     

     jessehouwing

     and

     Copilot

     authored
     ba37813View commit details

     Copy full SHA for ba37813

     Browse repository at this point

   • Add .editorconfig and .gitattributes to enforce LF line endings (#181)

     Show description for 8553b8c
     

     jessehouwing

     and

     Copilot

     authored
     8553b8cView commit details

     Copy full SHA for 8553b8c

     Browse repository at this point

   • Bump actions/checkout from 5.0.1 to 7.0.1 (#173)

     Show description for cd3deef
     dependabot[bot]

     authored
     cd3deefView commit details

     Copy full SHA for cd3deef

     Browse repository at this point

   • Preserve historical SHA pins during branch normalization (#165)

     Show description for d14124e
     

     3 peopleauthored
     d14124eView commit details

     Copy full SHA for d14124e

     Browse repository at this point

   • Bump actions/setup-go from 6.4.0 to 7.0.0 (#172)

     Show description for 9d7e72c
     dependabot[bot]

     authored
     9d7e72cView commit details

     Copy full SHA for 9d7e72c

     Browse repository at this point

   • Bump the go-minor-and-patch group with 5 updates (#171)

     Show description for e730cd3
     dependabot[bot]

     authored
     e730cd3View commit details

     Copy full SHA for e730cd3

     Browse repository at this point

   • Bump cli/gh-extension-precompile from 2.1.0 to 2.2.0 (#170)

     Show description for c8b4afe
     dependabot[bot]

     authored
     c8b4afeView commit details

     Copy full SHA for c8b4afe

     Browse repository at this point

   • pin: preserve locked targets during SHA normalization (#167)

     Show description for ae9d417
     bayandin

     authored
     ae9d417View commit details

     Copy full SHA for ae9d417

     Browse repository at this point
3. Commits on Oct 15, 2026

   • Add dependabot config (#101)

     Show description for f43e069
     

     nodeselector

     and

     Copilot

     authored
     f43e069View commit details

     Copy full SHA for f43e069

     Browse repository at this point
4. Commits on Oct 12, 2026

   • checks: report unused lockfile entries and untracked workflows as errors (#159)

     Show description for d5dca22
     nodeselector

     authored
     d5dca22View commit details

     Copy full SHA for d5dca22

     Browse repository at this point

   • docs: update release stage to public preview (#162)

     Show description for 200cd5e
     

     Steve-Glass

     and

     Copilot

     authored
     200cd5eView commit details

     Copy full SHA for 200cd5e

     Browse repository at this point

   • workflowfile: honour GH_ACTIONS_LOCK_REPO_ROOT for repo root discovery (#160)

     Show description for 4d5f910
     nodeselector

     authored
     4d5f910View commit details

     Copy full SHA for 4d5f910

     Browse repository at this point

   • verify-local: report ./ refs instead of migrating them on disk (#158)

     Show description for e9c1c33
     nodeselector

     authored
     e9c1c33View commit details

     Copy full SHA for e9c1c33

     Browse repository at this point
5. Commits on Oct 11, 2026

   • Return the context error when cancelled during parity (#157)

     Show description for 4f28243
     nodeselector

     authored
     4f28243View commit details

     Copy full SHA for 4f28243

     Browse repository at this point

   • Check mutable-ref pins against ref history under --verify (#156)

     Show description for f0e80cd
     nodeselector

     authored
     f0e80cdView commit details

     Copy full SHA for f0e80cd

     Browse repository at this point

   • Rename the repo-hijacked finding category to repo-replaced (#155)

     Show description for d8674de
     nodeselector

     authored
     d8674deView commit details

     Copy full SHA for d8674de

     Browse repository at this point

   • Fail closed under the Dependabot proxy (#154)

     Show description for 7ecfd59
     nodeselector

     authored
     7ecfd59View commit details

     Copy full SHA for 7ecfd59

     Browse repository at this point