Skip to content

chore: bump undici, pin actions to SHAs, and fix CI workflows#19

Merged
ben-miru merged 7 commits intomainfrom
chore/bump-undici-fix-submodule-lint
Mar 24, 2026
Merged

chore: bump undici, pin actions to SHAs, and fix CI workflows#19
ben-miru merged 7 commits intomainfrom
chore/bump-undici-fix-submodule-lint

Conversation

@ben-miru
Copy link
Copy Markdown
Contributor

@ben-miru ben-miru commented Mar 24, 2026

Summary

  • Bump undici override from 6.23.0 to 6.24.1 and rebuild dist/
  • Pin all GitHub Actions to full-length commit SHAs (org policy requirement)
  • Fix lint script to handle git submodule .git file by rsyncing to a temp dir
  • Fix CodeQL workflow: replace removed matrix reference with literal typescript value
  • Rename CI job keys to align with required GitHub branch protection checks

🤖 Generated with Claude Code

ben-miru and others added 3 commits March 24, 2026 14:18
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
When running inside a git submodule the .git entry is a file pointing to
the parent repo. Docker can't follow those relative paths, so rsync into
a temp dir with a real git repo before mounting for super-linter.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@ben-miru ben-miru force-pushed the chore/bump-undici-fix-submodule-lint branch from 3208433 to 8ab2cd3 Compare March 24, 2026 21:18
ben-miru and others added 2 commits March 24, 2026 14:35
The strategy matrix was removed but languages still referenced
matrix.language, causing startup_failure on all PR workflows.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Required by org policy: all actions must be pinned to a full-length
commit SHA. Version tags are preserved as trailing comments.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@github-advanced-security
Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

ben-miru and others added 2 commits March 24, 2026 14:41
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@ben-miru ben-miru changed the title chore: bump undici and fix submodule lint chore: bump undici, pin actions to SHAs, and fix CI workflows Mar 24, 2026
@ben-miru ben-miru merged commit 376d975 into main Mar 24, 2026
29 checks passed
@ben-miru ben-miru deleted the chore/bump-undici-fix-submodule-lint branch March 24, 2026 21:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant