[PR #2278] [CLOSED] ci: pin actions in the existing Node.js build #5134

New issue

Closed

opened 2026-10-31 01:04:14 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-31 01:04:14 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/morluto/rea/pull/2278
Author: @vegadlyra
Created: 10/12/2026
Status: ❌ Closed

Base: main ← Head: main

📝 Commits (4)

9890021 Add GitHub Actions workflow for Node.js with Webpack
666f962 Merge branch 'morluto:main' into main
3902ba1 fix(ci): pin the Node build and action permissions
3a1d3e7 ci: pin actions in the existing shared Node build

📊 Changes

1 file changed (+2 additions, -2 deletions)

View changed files

📝 .github/workflows/ci.yml (+2 -2)

📄 Description

The proposed separate Webpack workflow duplicated the repository build and used unsupported Node versions and undeclared tooling. This change keeps the shared Build package job as the build owner and pins its checkout/setup-node actions to full commit SHAs. The existing .nvmrc toolchain, npm ci, artifact cache, and read-only permissions remain the source of build behavior.

Validation: source inspection only. Tests and checks were skipped at the user's explicit request.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/morluto/rea/pull/2278 **Author:** [@vegadlyra](https://github.com/vegadlyra) **Created:** 10/12/2026 **Status:** ❌ Closed **Base:** `main` ← **Head:** `main` --- ### 📝 Commits (4) - [`9890021`](https://github.com/morluto/rea/commit/9890021f8e5810510d1eca2571f023e37d25b158) Add GitHub Actions workflow for Node.js with Webpack - [`666f962`](https://github.com/morluto/rea/commit/666f9622832396815ce4103be03112efe686e028) Merge branch 'morluto:main' into main - [`3902ba1`](https://github.com/morluto/rea/commit/3902ba1b83766b7e2ac32909f5f84a56dda0e590) fix(ci): pin the Node build and action permissions - [`3a1d3e7`](https://github.com/morluto/rea/commit/3a1d3e7d9541885265a52ea7dda3a44b644f7df6) ci: pin actions in the existing shared Node build ### 📊 Changes **1 file changed** (+2 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/ci.yml` (+2 -2) </details> ### 📄 Description The proposed separate Webpack workflow duplicated the repository build and used unsupported Node versions and undeclared tooling. This change keeps the shared Build package job as the build owner and pins its checkout/setup-node actions to full commit SHAs. The existing .nvmrc toolchain, npm ci, artifact cache, and read-only permissions remain the source of build behavior. Validation: source inspection only. Tests and checks were skipped at the user's explicit request. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-31 01:04:14 +00:00

closed this issue
added the
pull-request
label

bsakaguchi referenced this issue

2026-11-01 21:43:00 +00:00

[PR #5134] [CLOSED] fix(adb): admit empty string intent extras at the domain boundary #6780

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

morluto/rea#5134

No description provided.

Rows
Columns