Skip to content

Pin dependencies#853

Merged
rebkwok merged 1 commit intomainfrom
renovate/pin-dependencies
Apr 1, 2026
Merged

Pin dependencies#853
rebkwok merged 1 commit intomainfrom
renovate/pin-dependencies

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Mar 20, 2026

This PR contains the following updates:

Package Type Update Change
actions/checkout action pinDigest de0fac2
actions/create-github-app-token action pinDigest fee1f7d
opensafely-core/setup-action action pinDigest c458795

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Wednesday ( * 0-3 * * WED ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added dependencies Pull requests that update a dependency file actions labels Mar 20, 2026
@renovate renovate bot force-pushed the renovate/pin-dependencies branch from acf22dc to 2a425bf Compare March 30, 2026 07:58
rebkwok added a commit that referenced this pull request Apr 1, 2026
minimumReleaseAge is not supported for "pinDigest" update types.
https://docs.renovatebot.com/key-concepts/minimum-release-age/#which-update-types-take-minimumreleaseage-into-account

Opting out of it for pinDigest update types should prevent the forever-pending status on PRs like the one to pin dependencies for GHA, which is trying to pin all GHA to digests
#853

https://docs.renovatebot.com/key-concepts/minimum-release-age/#how-do-i-opt-out-dependencies-from-minimum-release-age-checks
@renovate renovate bot force-pushed the renovate/pin-dependencies branch from 2a425bf to 3996fa9 Compare April 1, 2026 13:19
@rebkwok rebkwok merged commit e260d3a into main Apr 1, 2026
7 checks passed
@rebkwok rebkwok deleted the renovate/pin-dependencies branch April 1, 2026 14:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

actions dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant