fix: prune stale container pins and move UpdateContainerPins to after compilation#39770

pelikhan merged 3 commits into

maingithub/gh-aw:mainfrom

copilot/actions-lock-json-firewall-version-updategithub/gh-aw:copilot/actions-lock-json-firewall-version-updateCopy head branch name to clipboard