Commit history

1. Commits on Oct 23, 2026

   • Authenticate public github.com lookups on GHE.com (#244)

     Show description for 759f9c2
     nodeselector

     authored
     759f9c2View commit details

     Copy full SHA for 759f9c2

     View code at this pointBrowse repository at this point
2. Commits on Oct 22, 2026

   • Speed up online checks of recorded pins and show progress while they run (#239)

     Show description for 9b1b5b5
     

     nodeselector

     and

     Copilot

     authored
     9b1b5b5View commit details

     Copy full SHA for 9b1b5b5

     View code at this pointBrowse repository at this point

   • Link each finding to its troubleshooting section (#225)

     Show description for 96dab5d
     

     nodeselector

     and

     Copilot

     authored
     96dab5dView commit details

     Copy full SHA for 96dab5d

     View code at this pointBrowse repository at this point

   • Drop self-edges when narrowing merges a composite with its own child (#230)

     Show description for 12f8bd2
     

     nodeselector

     and

     Copilot

     authored
     12f8bd2View commit details

     Copy full SHA for 12f8bd2

     View code at this pointBrowse repository at this point

   • Lock refs another workflow rewrites in a shared $/ action (#231)

     Show description for 4cf118d
     

     nodeselector

     and

     Copilot

     authored
     4cf118dView commit details

     Copy full SHA for 4cf118d

     View code at this pointBrowse repository at this point

   • Don't abort --migrate-local-actions on an unparseable workflow (#229)

     Show description for de08e90
     

     nodeselector

     and

     Copilot

     authored
     de08e90View commit details

     Copy full SHA for de08e90

     View code at this pointBrowse repository at this point

   • Give missing refs and invalid workflows their own JSON categories; report post-fix state in fix-mode JSON (#232)

     Show description for 6272966
     

     nodeselector

     and

     Copilot

     authored
     6272966View commit details

     Copy full SHA for 6272966

     View code at this pointBrowse repository at this point

   • Keep moved floating refs sticky in fix runs (#227)

     Show description for dabb479
     

     nodeselector

     and

     Copilot

     authored
     dabb479View commit details

     Copy full SHA for dabb479

     View code at this pointBrowse repository at this point

   • Warn on fresh tags when a cooldown is configured (#224)

     Show description for 4f01e43
     

     nodeselector

     and

     Copilot

     authored
     4f01e43View commit details

     Copy full SHA for 4f01e43

     View code at this pointBrowse repository at this point
3. Commits on Oct 21, 2026

   • Treat local ./ actions as opaque notices (#219)

     Show description for e192621
     

     nodeselector

     and

     Copilot

     authored
     e192621View commit details

     Copy full SHA for e192621

     View code at this pointBrowse repository at this point

   • Tell users to ask action maintainers to pin container images (#222)

     Show description for 5b86885
     

     nodeselector

     and

     Copilot

     authored
     5b86885View commit details

     Copy full SHA for 5b86885

     View code at this pointBrowse repository at this point

   • Warn about container images the lockfile can't pin (#220)

     Show description for b2188ce
     

     nodeselector

     and

     Copilot

     authored
     b2188ceView commit details

     Copy full SHA for b2188ce

     View code at this pointBrowse repository at this point

   • Report unverifiable pins as retryable errors (#209)

     Show description for 8ebefb8
     

     nodeselector

     and

     Copilot

     authored
     8ebefb8View commit details

     Copy full SHA for 8ebefb8

     View code at this pointBrowse repository at this point

   • Advise --relock for composite-held exact tags behind their commit (#221)

     Show description for 5a1469a
     

     nodeselector

     and

     Copilot

     authored
     5a1469aView commit details

     Copy full SHA for 5a1469a

     View code at this pointBrowse repository at this point

   • Prove every own-SHA rewrite and check reused composites' children (#215)

     Show description for a0a7edc
     

     nodeselector

     and

     Copilot

     authored
     a0a7edcView commit details

     Copy full SHA for a0a7edc

     View code at this pointBrowse repository at this point

   • Block exact tags locked behind their commit (#208)

     Show description for 4cc8e2b
     

     nodeselector

     and

     Copilot

     authored
     4cc8e2bView commit details

     Copy full SHA for 4cc8e2b

     View code at this pointBrowse repository at this point

   • Verify and rebuild complete transitive lock graphs (#214)

     Show description for 723eebc
     

     nodeselector

     and

     Copilot

     authored
     723eebcView commit details

     Copy full SHA for 723eebc

     View code at this pointBrowse repository at this point

   • Bound and classify GitHub API retries (#207)

     Show description for 2173763
     

     nodeselector

     and

     Copilot

     authored
     2173763View commit details

     Copy full SHA for 2173763

     View code at this pointBrowse repository at this point

   • Keep lockfiles that record a tag containing @ loadable (#217)

     Show description for 1370c18
     

     nodeselector

     and

     Copilot

     authored
     1370c18View commit details

     Copy full SHA for 1370c18

     View code at this pointBrowse repository at this point

   • Verify locked manifests in online runs that keep recorded pins (#212)

     Show description for 748cba9
     

     nodeselector

     and

     Copilot

     authored
     748cba9View commit details

     Copy full SHA for 748cba9

     View code at this pointBrowse repository at this point

   • Spell full SHAs one way in the lockfile (#213)

     Show description for d2a970a
     

     nodeselector

     and

     Copilot

     authored
     d2a970aView commit details

     Copy full SHA for d2a970a

     View code at this pointBrowse repository at this point

   • Skip cooldown diagnostics in read-only checks (#204)

     Show description for 5517160
     

     nodeselector

     and

     Copilot

     authored
     5517160View commit details

     Copy full SHA for 5517160

     View code at this pointBrowse repository at this point

   • Clarify warnings for tags ahead of locked commits (#205)

     Show description for d549b67
     

     nodeselector

     and

     Copilot

     authored
     d549b67View commit details

     Copy full SHA for d549b67

     View code at this pointBrowse repository at this point
4. Commits on Oct 20, 2026

   • Preserve SSO guidance in concise terminal errors (#203)

     Show description for 817f1d4
     

     nodeselector

     and

     Copilot

     authored
     817f1d4View commit details

     Copy full SHA for 817f1d4

     View code at this pointBrowse repository at this point

   • Repair lock entries that record their own SHA as the ref (#198)

     nodeselector

     authored
     dacafb7View commit details

     Copy full SHA for dacafb7

     View code at this pointBrowse repository at this point

   • Decide parity findings in one disposition step; keep unreplaced pins blocking (#197)

     nodeselector

     authored
     ec26bdcView commit details

     Copy full SHA for ec26bdc

     View code at this pointBrowse repository at this point

   • Trace every locked commit to its recorded ref (#186)

     Show description for 8bb4bb6
     

     nodeselector

     and

     Copilot

     authored
     8bb4bb6View commit details

     Copy full SHA for 8bb4bb6

     View code at this pointBrowse repository at this point

   • Include actions in parallel step groups in the lockfile (#176)

     Show description for 582fee1
     

     3 peopleauthored
     582fee1View commit details

     Copy full SHA for 582fee1

     View code at this pointBrowse repository at this point

   • Fix Windows test issues (#177)

     Show description for ba37813
     

     jessehouwing

     and

     Copilot

     authored
     ba37813View commit details

     Copy full SHA for ba37813

     View code at this pointBrowse repository at this point
5. Commits on Oct 12, 2026

   • checks: report unused lockfile entries and untracked workflows as errors (#159)

     Show description for d5dca22
     nodeselector

     authored
     d5dca22View commit details

     Copy full SHA for d5dca22

     View code at this pointBrowse repository at this point

   • workflowfile: honour GH_ACTIONS_LOCK_REPO_ROOT for repo root discovery (#160)

     Show description for 4d5f910
     nodeselector

     authored
     4d5f910View commit details

     Copy full SHA for 4d5f910

     View code at this pointBrowse repository at this point

   • verify-local: report ./ refs instead of migrating them on disk (#158)

     Show description for e9c1c33
     nodeselector

     authored
     e9c1c33View commit details

     Copy full SHA for e9c1c33

     View code at this pointBrowse repository at this point
6. Commits on Oct 11, 2026

   • Return the context error when cancelled during parity (#157)

     Show description for 4f28243
     nodeselector

     authored
     4f28243View commit details

     Copy full SHA for 4f28243

     View code at this pointBrowse repository at this point

   • Check mutable-ref pins against ref history under --verify (#156)

     Show description for f0e80cd
     nodeselector

     authored
     f0e80cdView commit details

     Copy full SHA for f0e80cd

     View code at this pointBrowse repository at this point

   • Rename the repo-hijacked finding category to repo-replaced (#155)

     Show description for d8674de
     nodeselector

     authored
     d8674deView commit details

     Copy full SHA for d8674de

     View code at this pointBrowse repository at this point