Skip to content

Use @main for Homebrew/actions/setup-homebrew instead of pinned SHA#7

Merged
hbelmiro merged 4 commits into
mainfrom
copilot/pin-github-actions-commit-shas
Apr 17, 2026
Merged

Use @main for Homebrew/actions/setup-homebrew instead of pinned SHA#7
hbelmiro merged 4 commits into
mainfrom
copilot/pin-github-actions-commit-shas

Conversation

Copilot AI commented Apr 17, 2026

Copy link
Copy Markdown
Contributor

Homebrew/actions/setup-homebrew doesn't publish versioned releases — the upstream README recommends @main. Pinning to a commit SHA causes silent staleness as Homebrew evolves, with no tag-based update mechanism available.

  • Changed Homebrew/actions/setup-homebrew@98cfa07b...@main
  • actions/checkout remains SHA-pinned since it has proper semver tags (v4.3.1)

@hbelmiro hbelmiro marked this pull request as ready for review April 17, 2026 12:31
@hbelmiro hbelmiro merged commit ba56c53 into main Apr 17, 2026
2 of 4 checks passed
@hbelmiro hbelmiro deleted the copilot/pin-github-actions-commit-shas branch April 17, 2026 12:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants