4 Commits

Include renames

Author	SHA1	Message	Date
Roger BarretoandGitHub	01a3c5be8a	ci: pin third-party GitHub Actions to commit SHAs (#5972) ... Replaces every floating tag in our workflow and composite action files with an immutable 40-character commit SHA, keeping the original `# vX` comment so Dependabot can still propose version bumps. 186 occurrences across 25 workflows and 2 composite actions. Also widens the github-actions Dependabot entry to use the plural `directories` key with `/.github/actions/*` so composite actions under `.github/actions/<name>/action.yml` are kept up to date. Previously Dependabot only scanned `.github/workflows` and the repo-root `action.yml`, leaving our `python-setup` and `sample-validation-setup` composite actions unmaintained.	2026-05-20 22:10:32 +00:00
Evan MattsonandGitHub	5d4873888f	Don't fail if review issue occurs (#5434)	2026-04-23 13:24:21 +09:00
Evan MattsonandGitHub	e2f161c8a0	Pin to specific release (#5430)	2026-04-23 08:23:56 +09:00
3 people	9e915b36b6	Add pr review GH workflow (#5418) ... * Add workflow PR review * Allow reviews on draft PRs * Update .github/workflows/devflow-pr-review.yml Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * Update .github/workflows/devflow-pr-review.yml Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * Bump actions/checkout to v6 and uv to 0.11.x --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>	2026-04-22 13:52:42 +09:00