relock: regenerate lockfile, fix test.yml permissions by nodeselector · Pull Request #66 · github/gh-actions-lock · GitHub
Skip to content

relock: regenerate lockfile, fix test.yml permissions - #66

Merged
nodeselector merged 1 commit into
mainfrom
nodeselector-dependabot-relock-workflow
Jun 25, 2026
Merged

nodeselector merged 1 commit into
mainfrom
nodeselector-dependabot-relock-workflow

Conversation

@nodeselector

@nodeselector nodeselector commented Jun 25, 2026 •

Copy link
Copy Markdown
Collaborator

Regenerated lockfile from scratch after PR #65 removed relock.yml and changed action references.

Changes:

  • test.yml: uses github/gh-actions-lock/actions/lint@main (lockable, no local action)
  • test.yml: added id-token: write for goproxy OIDC in the lint job
  • Lockfile regenerated — removes stale relock.yml entry, properly tracks gh-actions-lock@main for test.yml

Copilot AI review requested due to automatic review settings June 25, 2026 13:36
GitHub Advanced Security started work on behalf of nodeselector June 25, 2026 13:37
GitHub Advanced Security finished work on behalf of nodeselector June 25, 2026 13:37
@nodeselector
nodeselector force-pushed the nodeselector-dependabot-relock-workflow branch from 1577923 to 4e6c1a1 Compare June 25, 2026 13:40

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Not ready to approve

A remaining workflow (dependabot-relock.yml) references a missing reusable workflow (.github/workflows/relock.yml), which will cause CI failures until it’s updated or restored.

Pull request overview

Updates the repository’s GitHub Actions lockfile state after switching the test.yml lint step to a local composite action, which makes that workflow ineligible for lockfile onboarding and removes previously tracked entries.

Changes:

  • Switch .github/workflows/test.yml to use the local ./actions/lint composite action.
  • Regenerate .github/workflows/actions.lock, removing stale/now-ineligible workflow entries and associated dependencies.
File summaries
File Description
.github/workflows/test.yml Uses local ./actions/lint, which changes lockfile eligibility for this workflow.
.github/workflows/actions.lock Regenerated lockfile reflecting removed/ineligible workflows and pruning unused dependencies.

Review details

Copilot wasn't able to review any files in this pull request.

  • Files reviewed: 0/1 changed files
  • Comments generated: 1
  • Review effort level: Low

Note

Your feedback helps us improve the quality of this feature.
Please use 👍 or 👎 to tell us whether this assessment is correct.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/workflows/actions.lock
GitHub Advanced Security started work on behalf of nodeselector June 25, 2026 13:40
GitHub Advanced Security finished work on behalf of nodeselector June 25, 2026 13:41
Removes stale relock.yml and gh-actions-lock@main entries.
test.yml uses ./actions/lint which isn't lockable.
@nodeselector
nodeselector force-pushed the nodeselector-dependabot-relock-workflow branch from 4e6c1a1 to 482cc66 Compare June 25, 2026 13:43
GitHub Advanced Security started work on behalf of nodeselector June 25, 2026 13:43
GitHub Advanced Security finished work on behalf of nodeselector June 25, 2026 13:44
@nodeselector nodeselector changed the title relock: regenerate after local action switch relock: regenerate lockfile, fix test.yml permissions Jun 25, 2026
@nodeselector
nodeselector merged commit c5a7854 into main Jun 25, 2026
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants