Switch to public package mirror by nodeselector · Pull Request #89 · github/gh-actions-lock · GitHub
Skip to content

Switch to public package mirror - #89

Merged
nodeselector merged 2 commits into
mainfrom
nodeselector-open-source-gh-actions-lock
Jul 22, 2026
Merged

nodeselector merged 2 commits into
mainfrom
nodeselector-open-source-gh-actions-lock

Conversation

@nodeselector

@nodeselector nodeselector commented Jul 21, 2026 •

Copy link
Copy Markdown
Collaborator

What

  • Remove github/setup-goproxy from the test and release workflows and the published lint action.
  • Drop the test jobs' now-unused id-token: write permission.
  • Regenerate actions.lock without the private proxy dependency.

The release workflow keeps OIDC permission for build attestations.

Copilot AI review requested due to automatic review settings July 21, 2026 23:39
@nodeselector
nodeselector requested a review from a team as a code owner July 21, 2026 23:39

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Removes the private Go proxy setup now that required modules are public.

Changes:

  • Removes setup-goproxy from test, release, and lint workflows.
  • Drops associated test-job OIDC permissions.
  • Updates the lockfile while retaining the temporary transitive proxy pin.
Show a summary per file
File Description
actions/lint/action.yml Removes proxy setup from the published lint action.
.github/workflows/test.yml Removes proxy steps and OIDC permissions.
.github/workflows/release.yml Removes release proxy setup.
.github/workflows/actions.lock Removes the release workflow’s proxy entry.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  • Files reviewed: 3/4 changed files
  • Comments generated: 1
  • Review effort level: Medium

Comment thread .github/workflows/test.yml Outdated
@nodeselector
nodeselector force-pushed the nodeselector-open-source-gh-actions-lock branch from 00d1328 to de7be51 Compare July 21, 2026 23:57
@nodeselector
nodeselector force-pushed the nodeselector-open-source-gh-actions-lock branch from de7be51 to 5687117 Compare July 22, 2026 00:00
@nodeselector nodeselector changed the title Remove private Go proxy setup after public release Switch to public package mirror Jul 22, 2026
@nodeselector
nodeselector merged commit 773d8c0 into main Jul 22, 2026
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants