Merged
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
albu-stacks
approved these changes
Dec 17, 2025
albu-stacks
left a comment
albu-stacks
left a comment
There was a problem hiding this comment.
LGTM! The action runs look fine too
Contributor
There was a problem hiding this comment.
Pull request overview
This PR modernizes and streamlines the GitHub Actions workflows by consolidating common functionality into reusable actions, pinning third-party actions to specific commit hashes for security, and temporarily disabling a broken version publishing step.
Key changes:
- Refactored setup and code check steps into reusable composite actions (
install-nodeandcheck-code) - Pinned third-party action
wagoid/commitlint-github-actionto a specific commit hash for security - Temporarily commented out the automatic version publishing job due to permissions issues
Reviewed changes
Copilot reviewed 8 out of 8 changed files in this pull request and generated 3 comments.
Show a summary per file
| File | Description |
|---|---|
.github/workflows/version.yml |
Renamed workflow, added concurrency control, refactored to use new composite actions, commented out broken version job |
.github/workflows/pull_request.yml |
Deleted old pull request workflow file |
.github/workflows/pull-request.yml |
New simplified pull request workflow using reusable actions and workflows, with pinned third-party actions |
.github/workflows/publish.yml |
Renamed workflow, added concurrency control, refactored to use new install-node action, removed unnecessary pull-requests permission |
.github/workflows/pre-run.yml |
New reusable workflow for fork detection that can be called by other workflows |
.github/actions/install-node/action.yml |
New composite action that sets up Node.js 24 and installs dependencies |
.github/actions/code-checks/action.yml |
Deleted old code checks action |
.github/actions/check-code/action.yml |
New composite action for running linting and type checking (renamed from code-checks) |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
versionstep