Skip to content

Commit c3e0f37

Browse files
committed
Sync version comments to match bumped Action SHAs
Dependabot updated the SHA pins for ruby/setup-ruby (v1.301.0 → v1.302.0) and actions/setup-node (v6.3.0 → v6.4.0), but left the trailing version comment stale on lines that also carry a `# zizmor: ignore[...]` suffix. Resync the comments so zizmor's ref-version-mismatch audit passes. Behavior is unchanged — SHAs were already correct for the new versions.
1 parent 7fe1087 commit c3e0f37

2 files changed

Lines changed: 4 additions & 4 deletions

File tree

.github/workflows/release-ruby.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
persist-credentials: false
3131

3232
- name: Set up Ruby
33-
uses: ruby/setup-ruby@7372622e62b60b3cb750dcd2b9e32c247ffec26a # v1.301.0 # zizmor: ignore[cache-poisoning] -- cached deps are for testing, not release artifact generation
33+
uses: ruby/setup-ruby@7372622e62b60b3cb750dcd2b9e32c247ffec26a # v1.302.0 # zizmor: ignore[cache-poisoning] -- cached deps are for testing, not release artifact generation
3434
with:
3535
ruby-version: '3.3'
3636
bundler-cache: true
@@ -66,7 +66,7 @@ jobs:
6666
git merge-base --is-ancestor "$GITHUB_SHA" origin/main
6767
6868
- name: Set up Ruby
69-
uses: ruby/setup-ruby@7372622e62b60b3cb750dcd2b9e32c247ffec26a # v1.301.0 # zizmor: ignore[cache-poisoning] -- cache is branch-isolated; fork PRs cannot write to this cache
69+
uses: ruby/setup-ruby@7372622e62b60b3cb750dcd2b9e32c247ffec26a # v1.302.0 # zizmor: ignore[cache-poisoning] -- cache is branch-isolated; fork PRs cannot write to this cache
7070
with:
7171
ruby-version: '3.3'
7272
bundler-cache: true

.github/workflows/release-typescript.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
persist-credentials: false
3131

3232
- name: Setup Node.js
33-
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.3.0 # zizmor: ignore[cache-poisoning] -- cached deps are for testing, not release artifact generation
33+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 # zizmor: ignore[cache-poisoning] -- cached deps are for testing, not release artifact generation
3434
with:
3535
node-version: '22'
3636
cache: 'npm'
@@ -75,7 +75,7 @@ jobs:
7575
git merge-base --is-ancestor "$GITHUB_SHA" origin/main
7676
7777
- name: Setup Node.js
78-
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.3.0 # zizmor: ignore[cache-poisoning] -- cache is branch-isolated; fork PRs cannot write to this cache
78+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 # zizmor: ignore[cache-poisoning] -- cache is branch-isolated; fork PRs cannot write to this cache
7979
with:
8080
node-version: '22'
8181
registry-url: 'https://registry.npmjs.org'

0 commit comments

Comments
 (0)