From 33bba3d806f64ba47f99db954c835a84dc5a2d49 Mon Sep 17 00:00:00 2001 From: dagecko Date: Mon, 30 Mar 2026 00:34:18 -0400 Subject: [PATCH 1/2] fix: harden GitHub Actions workflows --- .github/workflows/lock-threads.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/lock-threads.yml b/.github/workflows/lock-threads.yml index b995ae0..c6ae497 100644 --- a/.github/workflows/lock-threads.yml +++ b/.github/workflows/lock-threads.yml @@ -17,7 +17,7 @@ jobs: action: runs-on: ubuntu-latest steps: - - uses: dessant/lock-threads@v5 + - uses: dessant/lock-threads@1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771 # v5 with: issue-inactive-days: '7' pr-inactive-days: '7' \ No newline at end of file From fd22b4ba09447b4f72db49d51a85d95d0296bb59 Mon Sep 17 00:00:00 2001 From: Chris Nyhuis Date: Thu, 2 Apr 2026 20:32:19 -0400 Subject: [PATCH 2/2] fix: bump dessant/lock-threads to v6 and pin to SHA Bump from v5 to v6 (Node.js 24, updated deps) per reviewer suggestion. --- .github/workflows/lock-threads.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/lock-threads.yml b/.github/workflows/lock-threads.yml index c6ae497..a97e8a1 100644 --- a/.github/workflows/lock-threads.yml +++ b/.github/workflows/lock-threads.yml @@ -17,7 +17,7 @@ jobs: action: runs-on: ubuntu-latest steps: - - uses: dessant/lock-threads@1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771 # v5 + - uses: dessant/lock-threads@7266a7ce5c1df01b1c6db85bf8cd86c737dadbe7 # v6 with: issue-inactive-days: '7' pr-inactive-days: '7' \ No newline at end of file