Changelog

vitejs/vite · · 1 commit

Pinned GitHub Actions to commit SHAs

Workflow updates lock official GitHub actions to exact commits, reducing supply-chain risk across CI and release automation.

sapphi-red

Pinned official GitHub Actions to exact SHAs (sapphi-redb413bce)

This update replaces version tags like @v6/@v9 with pinned commit SHAs across CI, release, and repo automation workflows. It strengthens supply-chain security and makes these workflows less likely to change unexpectedly when upstream actions publish new releases.

Other misc changes

  • Renove/metadata cleanup to support pinning official actions.
  • Updated multiple workflow files to use pinned actions/* references.
  • Removed an exclusion rule from Renovate’s action pinning config.