Rename gh-actions-pin references to gh-actions-lock

README.md

@@ -117,7 +117,7 @@ graph entries with `uses:` links to direct dependencies).
 
 ## Related projects
 
-- [`github/gh-actions-pin`](https://github.com/github/gh-actions-pin) —
+- [`github/gh-actions-lock`](https://github.com/github/gh-actions-lock) —
   produces and maintains lockfiles.
 - [`actions/languageservices/workflow-parser`](https://github.com/actions/languageservices/tree/main/workflow-parser) —
   parses workflow YAML. Sibling library: `workflow-parser` reads the `.yml`
@@ -137,7 +137,7 @@ make lint
 
 Schema changes (any modification to `schema/lockfile-vX.Y.Z.json`, generated
 language bindings, or the fields emitted in `dependencies` / `workflows`)
-require coordination with `github/gh-actions-pin` because the CLI is the
+require coordination with `github/gh-actions-lock` because the CLI is the
 schema's primary producer.
 
 ## License

go/pkg/lockfile/lockfile.go

@@ -239,7 +239,7 @@ type Action struct {
 // supported. It enforces structural validity — unknown top-level keys are
 // rejected and required fields must be present — but does not validate pin
 // integrity (e.g. whether a SHA actually matches the ref) or action
-// existence. That belongs to the consumer (e.g. gh-actions-pin's check
+// existence. That belongs to the consumer (e.g. gh-actions-lock's check
 // command).
 //
 // The optional paths parameter scopes per-dependency validation to only the

go/pkg/lockfile/lockfile_test.go

@@ -35,7 +35,7 @@ func TestParse_FutureVersion_ReturnsFriendlyError(t *testing.T) {
 	// external readers (Dependabot, actions-workflow-parser), so the message
 	// must not name a specific wrapping CLI. Consumers append their own
 	// upgrade instructions off errors.Is(err, ErrFutureVersion).
-	assert.NotContains(t, msg, "gh-actions-pin", "library message must not name a specific consumer tool")
+	assert.NotContains(t, msg, "gh-actions-lock", "library message must not name a specific consumer tool")
 }
 
 func TestParse_FutureVersion_IsErrFutureVersion(t *testing.T) {

schema/lockfile-v0.0.1.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://gh.io/actions-lockfile/v0.0.1.json",
   "title": "GitHub Actions dependency lockfile",
-  "description": "Machine-generated lockfile describing the pinned action dependency graph for a repository's workflows. Written and updated by `gh actions-pin`.",
+  "description": "Machine-generated lockfile describing the pinned action dependency graph for a repository's workflows. Written and updated by `gh actions-lock`.",
   "type": "object",
   "additionalProperties": false,
   "required": ["version"],