Commit Graph

4 Commits

Author SHA1 Message Date
David Karlsson
00aefd5eae chore: pin GitHub Actions to full commit SHA; lock npm exact versions
All mutable action tags replaced with verified commit SHAs to prevent
supply-chain attacks via tag mutation. package.json ^ ranges replaced
with exact versions from package-lock.json.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-24 17:16:06 +01:00
dependabot[bot]
6cc880faf0 build(deps): bump actions/cache from 4.2.0 to 5.0.4
Bumps [actions/cache](https://github.com/actions/cache) from 4.2.0 to 5.0.4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](1bd1e32a3b...668228422a)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-19 01:42:57 +00:00
David Karlsson
9f09e7800e ci: force freshness agent to finally move on
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
2026-02-26 13:31:51 +01:00
David Karlsson
cfa99e63e3 ci: freshness agent + nightly repo scan
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
2026-02-20 10:25:11 +01:00