From dd7de732506ca7c9bceee2884219f2917f6fa029 Mon Sep 17 00:00:00 2001 From: Alex Kantor Date: Tue, 30 Jun 2026 11:50:15 +0100 Subject: [PATCH 1/3] ci: pin setup-cli-action to @v5 Updates setup-cli-action to the rolling @v5 tag (currently v5.1.0), which adds major/minor version pinning for the Kosli CLI via the version: input. Part of an org-wide bump of setup-cli-action consumers off older pinned refs to @v5. Co-Authored-By: Claude Opus 4.8 --- .github/workflows/apply.yml | 2 +- .github/workflows/base.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/apply.yml b/.github/workflows/apply.yml index 5446f22..c374c69 100644 --- a/.github/workflows/apply.yml +++ b/.github/workflows/apply.yml @@ -152,7 +152,7 @@ jobs: - name: Setup Kosli CLI if: inputs.kosli_template_file != '' - uses: kosli-dev/setup-cli-action@060e7f9bf6ac246743d6a62c5df847dfe7050867 # v5.2.1 + uses: kosli-dev/setup-cli-action@v5 with: version: ${{ inputs.kosli_cli_version }} diff --git a/.github/workflows/base.yml b/.github/workflows/base.yml index 72c7e44..e658cfe 100644 --- a/.github/workflows/base.yml +++ b/.github/workflows/base.yml @@ -130,7 +130,7 @@ jobs: - name: Setup Kosli CLI if: inputs.kosli_template_file != '' - uses: kosli-dev/setup-cli-action@060e7f9bf6ac246743d6a62c5df847dfe7050867 # v5.2.1 + uses: kosli-dev/setup-cli-action@v5 with: version: ${{ inputs.kosli_cli_version }} From 39531998ded0903298d576b3dcf1f270bab565bc Mon Sep 17 00:00:00 2001 From: Alex Kantor Date: Tue, 30 Jun 2026 12:05:24 +0100 Subject: [PATCH 2/3] ci: pin setup-cli-action to the v5.1.0 commit SHA Pin to the immutable v5.1.0 commit (35a4ac9d5bbe9c46c630c274ad2dc93be6bc9b3a) instead of the rolling @v5 tag, matching the harden-runner SHA-pinning convention used in this repo. Co-Authored-By: Claude Opus 4.8 --- .github/workflows/apply.yml | 2 +- .github/workflows/base.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/apply.yml b/.github/workflows/apply.yml index c374c69..1795074 100644 --- a/.github/workflows/apply.yml +++ b/.github/workflows/apply.yml @@ -152,7 +152,7 @@ jobs: - name: Setup Kosli CLI if: inputs.kosli_template_file != '' - uses: kosli-dev/setup-cli-action@v5 + uses: kosli-dev/setup-cli-action@35a4ac9d5bbe9c46c630c274ad2dc93be6bc9b3a # v5.1.0 with: version: ${{ inputs.kosli_cli_version }} diff --git a/.github/workflows/base.yml b/.github/workflows/base.yml index e658cfe..5de43ef 100644 --- a/.github/workflows/base.yml +++ b/.github/workflows/base.yml @@ -130,7 +130,7 @@ jobs: - name: Setup Kosli CLI if: inputs.kosli_template_file != '' - uses: kosli-dev/setup-cli-action@v5 + uses: kosli-dev/setup-cli-action@35a4ac9d5bbe9c46c630c274ad2dc93be6bc9b3a # v5.1.0 with: version: ${{ inputs.kosli_cli_version }} From 20e6955a3ae70a9ec8d9bd99bb57b4775769ef9a Mon Sep 17 00:00:00 2001 From: Alex Kantor Date: Tue, 30 Jun 2026 12:10:20 +0100 Subject: [PATCH 3/3] ci: bump setup-cli-action pin to v5.2.1 Re-pin to the latest setup-cli-action release (v5.2.1, 060e7f9bf6ac246743d6a62c5df847dfe7050867) instead of v5.1.0. Co-Authored-By: Claude Opus 4.8 --- .github/workflows/apply.yml | 2 +- .github/workflows/base.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/apply.yml b/.github/workflows/apply.yml index 1795074..5446f22 100644 --- a/.github/workflows/apply.yml +++ b/.github/workflows/apply.yml @@ -152,7 +152,7 @@ jobs: - name: Setup Kosli CLI if: inputs.kosli_template_file != '' - uses: kosli-dev/setup-cli-action@35a4ac9d5bbe9c46c630c274ad2dc93be6bc9b3a # v5.1.0 + uses: kosli-dev/setup-cli-action@060e7f9bf6ac246743d6a62c5df847dfe7050867 # v5.2.1 with: version: ${{ inputs.kosli_cli_version }} diff --git a/.github/workflows/base.yml b/.github/workflows/base.yml index 5de43ef..72c7e44 100644 --- a/.github/workflows/base.yml +++ b/.github/workflows/base.yml @@ -130,7 +130,7 @@ jobs: - name: Setup Kosli CLI if: inputs.kosli_template_file != '' - uses: kosli-dev/setup-cli-action@35a4ac9d5bbe9c46c630c274ad2dc93be6bc9b3a # v5.1.0 + uses: kosli-dev/setup-cli-action@060e7f9bf6ac246743d6a62c5df847dfe7050867 # v5.2.1 with: version: ${{ inputs.kosli_cli_version }}