From ef8de63325ecc890cdcc78b265adf85c35d9a7e1 Mon Sep 17 00:00:00 2001 From: ALF <263217947+askalf@users.noreply.github.com> Date: Sun, 1 Nov 2026 22:34:27 +0000 Subject: [PATCH 01/13] ci: bump Redline to askalf/ci@4365d12 in redline.yml --- .github/workflows/redline.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/redline.yml b/.github/workflows/redline.yml index 17ab9ad..61ec2b5 100644 --- a/.github/workflows/redline.yml +++ b/.github/workflows/redline.yml @@ -47,9 +47,9 @@ jobs: # checked by the called workflow (open, not a draft, head in this repo) before anything is fetched. if: github.event_name == 'workflow_dispatch' || (github.event.pull_request.draft == false && github.event.pull_request.head.repo.full_name == github.repository) # Pinned so a change to the review workflow reaches this repo only through a reviewed bump here. - uses: askalf/ci/.github/workflows/redline-review.yml@5305beec29bdd65ff79d5b431d8c3a25fe945bb1 # main 2026-11-01, askalf/ci#141 + uses: askalf/ci/.github/workflows/redline-review.yml@4365d12f956b60e795b5b55451e2035549a3600c # main 2026-11-01, askalf/ci#153 with: - redline-ref: 5305beec29bdd65ff79d5b431d8c3a25fe945bb1 + redline-ref: 4365d12f956b60e795b5b55451e2035549a3600c runner-label: redline pr: ${{ inputs.pr }} head: ${{ inputs.head }} From 3592f2fc40590a2bc8d65604986fde508fdf56a9 Mon Sep 17 00:00:00 2001 From: ALF <263217947+askalf@users.noreply.github.com> Date: Sun, 1 Nov 2026 22:34:29 +0000 Subject: [PATCH 02/13] ci: bump Redline to askalf/ci@4365d12 in redline-fix.yml --- .github/workflows/redline-fix.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/redline-fix.yml b/.github/workflows/redline-fix.yml index 8e49241..0f83be8 100644 --- a/.github/workflows/redline-fix.yml +++ b/.github/workflows/redline-fix.yml @@ -43,9 +43,9 @@ concurrency: jobs: fix: # Pinned so a change to the fix workflow reaches this repo only through a reviewed bump here. - uses: askalf/ci/.github/workflows/redline-fix-run.yml@5305beec29bdd65ff79d5b431d8c3a25fe945bb1 # main 2026-11-01, askalf/ci#141 + uses: askalf/ci/.github/workflows/redline-fix-run.yml@4365d12f956b60e795b5b55451e2035549a3600c # main 2026-11-01, askalf/ci#153 with: - redline-ref: 5305beec29bdd65ff79d5b431d8c3a25fe945bb1 + redline-ref: 4365d12f956b60e795b5b55451e2035549a3600c # cordon-fix is this repository's fix-lane runner: its own non-root account, one job # per registration. Only this workflow targets that label. runner-label: cordon-fix From e7d18fb72e1763574f45f6dab8b2195dfe9922b3 Mon Sep 17 00:00:00 2001 From: ALF <263217947+askalf@users.noreply.github.com> Date: Sun, 1 Nov 2026 22:34:31 +0000 Subject: [PATCH 03/13] ci: bump Redline to askalf/ci@4365d12 in public-text.yml --- .github/workflows/public-text.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/public-text.yml b/.github/workflows/public-text.yml index 06ffa27..e5531dd 100644 --- a/.github/workflows/public-text.yml +++ b/.github/workflows/public-text.yml @@ -18,6 +18,6 @@ concurrency: jobs: public-text: - uses: askalf/ci/.github/workflows/public-text.yml@5305beec29bdd65ff79d5b431d8c3a25fe945bb1 # main 2026-11-01, askalf/ci#141 + uses: askalf/ci/.github/workflows/public-text.yml@4365d12f956b60e795b5b55451e2035549a3600c # main 2026-11-01, askalf/ci#153 with: - redline-ref: 5305beec29bdd65ff79d5b431d8c3a25fe945bb1 + redline-ref: 4365d12f956b60e795b5b55451e2035549a3600c From c14f8ac505efe484ef0ba9a18e124775ae0a4d90 Mon Sep 17 00:00:00 2001 From: ALF <263217947+askalf@users.noreply.github.com> Date: Sun, 1 Nov 2026 22:34:34 +0000 Subject: [PATCH 04/13] ci: bump Redline to askalf/ci@4365d12 in redline-post.yml --- .github/workflows/redline-post.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/redline-post.yml b/.github/workflows/redline-post.yml index fdaaf02..bd24710 100644 --- a/.github/workflows/redline-post.yml +++ b/.github/workflows/redline-post.yml @@ -17,8 +17,8 @@ permissions: jobs: post: - uses: askalf/ci/.github/workflows/redline-post-verdict.yml@a5e734dd765bbc5a6d5515b781b09e1a762be23d # main 2026-11-01, askalf/ci#148 + uses: askalf/ci/.github/workflows/redline-post-verdict.yml@4365d12f956b60e795b5b55451e2035549a3600c # main 2026-11-01, askalf/ci#153 with: - redline-ref: a5e734dd765bbc5a6d5515b781b09e1a762be23d + redline-ref: 4365d12f956b60e795b5b55451e2035549a3600c secrets: reviewer-token: ${{ secrets.REDLINE_REVIEWER_TOKEN }} From 726a2bc303522b984f5a410de494af6f4f3219b6 Mon Sep 17 00:00:00 2001 From: ALF <263217947+askalf@users.noreply.github.com> Date: Sun, 1 Nov 2026 22:34:36 +0000 Subject: [PATCH 05/13] ci: bump action pins to askalf/ci@4365d12 in build.yml --- .github/workflows/build.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 02be8b3..2ef1908 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -30,7 +30,7 @@ jobs: outputs: changed: ${{ steps.diff.outputs.changed }} steps: - - uses: askalf/ci/actions/checkout-with-retry@5305beec29bdd65ff79d5b431d8c3a25fe945bb1 # main 2026-11-01, askalf/ci#141 + - uses: askalf/ci/actions/checkout-with-retry@4365d12f956b60e795b5b55451e2035549a3600c # main 2026-11-01, askalf/ci#153 with: persist-credentials: false - id: diff @@ -70,7 +70,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: askalf/ci/actions/checkout-with-retry@5305beec29bdd65ff79d5b431d8c3a25fe945bb1 # main 2026-11-01, askalf/ci#141 + - uses: askalf/ci/actions/checkout-with-retry@4365d12f956b60e795b5b55451e2035549a3600c # main 2026-11-01, askalf/ci#153 - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - name: Build + load uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0 From 4fc47b2a6e5e99f459adf7046acd07c2be13c451 Mon Sep 17 00:00:00 2001 From: ALF <263217947+askalf@users.noreply.github.com> Date: Sun, 1 Nov 2026 22:34:38 +0000 Subject: [PATCH 06/13] ci: bump action pins to askalf/ci@4365d12 in ci.yml --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 8292af2..61fe36b 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -21,7 +21,7 @@ jobs: runs-on: ${{ (github.repository != 'askalf/cordon' || github.event.pull_request && (github.event.pull_request.head.repo.full_name != github.repository || github.event.pull_request.user.login == 'dependabot[bot]')) && 'ubuntu-latest' || fromJSON('["self-hosted","cordon-exec"]') }} timeout-minutes: 10 steps: - - uses: askalf/ci/actions/checkout-with-retry@5305beec29bdd65ff79d5b431d8c3a25fe945bb1 # main 2026-11-01, askalf/ci#141 + - uses: askalf/ci/actions/checkout-with-retry@4365d12f956b60e795b5b55451e2035549a3600c # main 2026-11-01, askalf/ci#153 with: persist-credentials: false - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 From 69974071d1adfbd9e4bdb7c27cd4b15895342f6f Mon Sep 17 00:00:00 2001 From: ALF <263217947+askalf@users.noreply.github.com> Date: Sun, 1 Nov 2026 22:34:41 +0000 Subject: [PATCH 07/13] ci: bump action pins to askalf/ci@4365d12 in codeql.yml --- .github/workflows/codeql.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index e2177e9..5a7a36c 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -31,7 +31,7 @@ jobs: matrix: language: [javascript-typescript] steps: - - uses: askalf/ci/actions/checkout-with-retry@5305beec29bdd65ff79d5b431d8c3a25fe945bb1 # main 2026-11-01, askalf/ci#141 + - uses: askalf/ci/actions/checkout-with-retry@4365d12f956b60e795b5b55451e2035549a3600c # main 2026-11-01, askalf/ci#153 with: persist-credentials: false - uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 From 7327bc00ed7063dadb0be00a1e9bdae409480c2e Mon Sep 17 00:00:00 2001 From: ALF <263217947+askalf@users.noreply.github.com> Date: Sun, 1 Nov 2026 22:34:44 +0000 Subject: [PATCH 08/13] ci: bump action pins to askalf/ci@4365d12 in fleet-status-backfill.yml --- .github/workflows/fleet-status-backfill.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/fleet-status-backfill.yml b/.github/workflows/fleet-status-backfill.yml index 2b28d7a..85332d6 100644 --- a/.github/workflows/fleet-status-backfill.yml +++ b/.github/workflows/fleet-status-backfill.yml @@ -21,6 +21,6 @@ jobs: checks: read statuses: write steps: - - uses: askalf/ci/actions/fleet-status@5305beec29bdd65ff79d5b431d8c3a25fe945bb1 # main 2026-11-01, askalf/ci#141 + - uses: askalf/ci/actions/fleet-status@4365d12f956b60e795b5b55451e2035549a3600c # main 2026-11-01, askalf/ci#153 with: all-open: 'true' From 4a26c1e266031f13e4a4faf79d979fe3108fbdd3 Mon Sep 17 00:00:00 2001 From: ALF <263217947+askalf@users.noreply.github.com> Date: Sun, 1 Nov 2026 22:34:47 +0000 Subject: [PATCH 09/13] ci: bump action pins to askalf/ci@4365d12 in fleet-status-self-test.yml --- .github/workflows/fleet-status-self-test.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/fleet-status-self-test.yml b/.github/workflows/fleet-status-self-test.yml index 59bc754..169812e 100644 --- a/.github/workflows/fleet-status-self-test.yml +++ b/.github/workflows/fleet-status-self-test.yml @@ -25,10 +25,10 @@ jobs: permissions: contents: read steps: - - uses: askalf/ci/actions/checkout-with-retry@5305beec29bdd65ff79d5b431d8c3a25fe945bb1 # main 2026-11-01, askalf/ci#141 + - uses: askalf/ci/actions/checkout-with-retry@4365d12f956b60e795b5b55451e2035549a3600c # main 2026-11-01, askalf/ci#153 with: persist-credentials: false - - uses: askalf/ci/actions/fleet-status-check@5305beec29bdd65ff79d5b431d8c3a25fe945bb1 # main 2026-11-01, askalf/ci#141 + - uses: askalf/ci/actions/fleet-status-check@4365d12f956b60e795b5b55451e2035549a3600c # main 2026-11-01, askalf/ci#153 with: min-own-exprs: '5' From e31b73322730ec66021982edc1e56966e8530e65 Mon Sep 17 00:00:00 2001 From: ALF <263217947+askalf@users.noreply.github.com> Date: Sun, 1 Nov 2026 22:34:50 +0000 Subject: [PATCH 10/13] ci: bump action pins to askalf/ci@4365d12 in fleet-status.yml --- .github/workflows/fleet-status.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/fleet-status.yml b/.github/workflows/fleet-status.yml index 7a2a8b2..f915854 100644 --- a/.github/workflows/fleet-status.yml +++ b/.github/workflows/fleet-status.yml @@ -70,7 +70,7 @@ jobs: checks: read statuses: write steps: - - uses: askalf/ci/actions/fleet-status@5305beec29bdd65ff79d5b431d8c3a25fe945bb1 # main 2026-11-01, askalf/ci#141 + - uses: askalf/ci/actions/fleet-status@4365d12f956b60e795b5b55451e2035549a3600c # main 2026-11-01, askalf/ci#153 with: pr: ${{ github.event.pull_request.number || github.event.issue.number || github.event.workflow_run.pull_requests[0].number }} head-repo: ${{ github.event.workflow_run.head_repository.full_name }} From 4bce2538a5985bb17bd83be171124b73a22a234d Mon Sep 17 00:00:00 2001 From: ALF <263217947+askalf@users.noreply.github.com> Date: Sun, 1 Nov 2026 22:34:53 +0000 Subject: [PATCH 11/13] ci: bump action pins to askalf/ci@4365d12 in fuzz.yml --- .github/workflows/fuzz.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml index 6f94136..ceaa1f3 100644 --- a/.github/workflows/fuzz.yml +++ b/.github/workflows/fuzz.yml @@ -40,7 +40,7 @@ jobs: runs-on: ${{ (github.repository != 'askalf/cordon' || github.event.pull_request && (github.event.pull_request.head.repo.full_name != github.repository || github.event.pull_request.user.login == 'dependabot[bot]')) && 'ubuntu-latest' || fromJSON('["self-hosted","cordon-exec"]') }} timeout-minutes: 40 steps: - - uses: askalf/ci/actions/checkout-with-retry@5305beec29bdd65ff79d5b431d8c3a25fe945bb1 # main 2026-11-01, askalf/ci#141 + - uses: askalf/ci/actions/checkout-with-retry@4365d12f956b60e795b5b55451e2035549a3600c # main 2026-11-01, askalf/ci#153 with: persist-credentials: false - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 From a4499b1529eee400a27bce2e6f2a2cae9d1d4bdb Mon Sep 17 00:00:00 2001 From: ALF <263217947+askalf@users.noreply.github.com> Date: Sun, 1 Nov 2026 22:34:57 +0000 Subject: [PATCH 12/13] ci: bump action pins to askalf/ci@4365d12 in labels.yml --- .github/workflows/labels.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/labels.yml b/.github/workflows/labels.yml index 678d104..ec61add 100644 --- a/.github/workflows/labels.yml +++ b/.github/workflows/labels.yml @@ -42,7 +42,7 @@ jobs: contents: read issues: read # gh label list steps: - - uses: askalf/ci/actions/checkout-with-retry@5305beec29bdd65ff79d5b431d8c3a25fe945bb1 # main 2026-11-01, askalf/ci#141 + - uses: askalf/ci/actions/checkout-with-retry@4365d12f956b60e795b5b55451e2035549a3600c # main 2026-11-01, askalf/ci#153 with: persist-credentials: false From 73ffa90183fddc1ea4d6c006399fb7f12056a020 Mon Sep 17 00:00:00 2001 From: ALF <263217947+askalf@users.noreply.github.com> Date: Sun, 1 Nov 2026 22:35:01 +0000 Subject: [PATCH 13/13] ci: bump action pins to askalf/ci@4365d12 in release.yml --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index b403f08..c0654a6 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -40,7 +40,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 45 steps: - - uses: askalf/ci/actions/checkout-with-retry@5305beec29bdd65ff79d5b431d8c3a25fe945bb1 # main 2026-11-01, askalf/ci#141 + - uses: askalf/ci/actions/checkout-with-retry@4365d12f956b60e795b5b55451e2035549a3600c # main 2026-11-01, askalf/ci#153 with: persist-credentials: false fetch-depth: 0