fix(ci): pin auto-rebase reusable workflow to SHA by don-petry · Pull Request #153 · petry-projects/TalkTerm

don-petry · 2026-05-01T13:34:03Z

Summary

Pins petry-projects/.github/.github/workflows/auto-rebase-reusable.yml from @v1 to its resolved commit SHA 126c1441ee9cf040f2ce3ef0eda85d459b82f8e9
Retains # v1 comment so the human-readable version is still visible
Brings the repository into compliance with the org-wide action-pinning policy

Closes #144

Summary by CodeRabbit

Chores
- Updated GitHub Actions workflow configuration to pin a reusable workflow dependency to a specific commit hash instead of a version reference, ensuring consistent workflow execution.

@v1

Pin petry-projects/.github auto-rebase-reusable.yml from @v1 to SHA 126c1441ee9cf040f2ce3ef0eda85d459b82f8e9 to comply with the org-wide action-pinning policy. Closes #144 Co-authored-by: don-petry <don-petry@users.noreply.github.com>

coderabbitai · 2026-05-01T13:34:14Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 16b1ac5a-91d5-4625-a3b2-ea3eb332c86c

📥 Commits

Reviewing files that changed from the base of the PR and between 2ecfdb3 and 4c23597.

📒 Files selected for processing (1)

.github/workflows/auto-rebase.yml

📝 Walkthrough

Walkthrough

Updates .github/workflows/auto-rebase.yml to pin the reusable workflow reference to a specific commit SHA instead of a version tag, addressing action-pinning compliance requirements.

Changes

Cohort / File(s)	Summary
Workflow Action Pinning `.github/workflows/auto-rebase.yml`	Pins reusable workflow reference from `@v1` tag to commit SHA `@126c1441ee9cf040f2ce3ef0eda85d459b82f8e9`, retaining the version comment for reference clarity.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related issues

Compliance: unpinned-actions-auto-rebase.yml #144 — Directly addresses the unpinned-actions compliance finding for this specific workflow file.
Compliance: unpinned-actions-claude.yml bmad-bgreat-suite#84 — Related change applying the same action-pinning pattern to a different repository's workflow.
Compliance: unpinned-actions-auto-rebase.yml google-app-scripts#237 — Related change pinning a reusable workflow reference to resolve the same action-pinning compliance requirement.
Compliance: unpinned-actions-auto-rebase.yml broodly#167 — Related change addressing unpinned-action compliance by pinning to a commit SHA.
Compliance: unpinned-actions-claude.yml markets#84 — Related change applying action-pinning standards to a reusable workflow reference.
Compliance: unpinned-actions-claude.yml #86 — Related change pinning a reusable workflow to address action-pinning compliance.
Compliance: unpinned-actions-claude.yml broodly#100 — Related change addressing GitHub workflow action-pinning compliance across multiple repositories.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: pinning the auto-rebase reusable workflow from `@v1` to a fixed commit SHA.
Linked Issues check	✅ Passed	The PR successfully addresses issue `#144` by pinning the auto-rebase reusable workflow to commit SHA 126c1441ee9cf040f2ce3ef0eda85d459b82f8e9, bringing the repository into compliance with the org-wide action-pinning policy.
Out of Scope Changes check	✅ Passed	All changes are scoped to the objective: pinning the reusable workflow reference and retaining the human-readable comment, with only a trailing newline adjustment.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch claude/issue-144-20260501-1332

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Review rate limit: 0/1 reviews remaining, refill in 60 minutes.}

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

don-petry · 2026-05-01T13:34:25Z

Self-review complete — the change looks correct:

SHA 126c1441ee9cf040f2ce3ef0eda85d459b82f8e9 is the resolved commit for the v1 tag (verified via GitHub API)
Only the uses: line was modified; the trigger event, concurrency group, and job-level permissions: block are all unchanged (as required by the file's AGENTS header)
# v1 comment retained for human readability

Waiting for CI. @don-petry — CODEOWNERS designates you as reviewer. Please review and merge when checks pass.

Copilot

Pull request overview

Pins the org-level reusable workflow reference in the repo’s auto-rebase caller workflow to a specific commit SHA to satisfy the action-pinning compliance requirement.

Changes:

Update .github/workflows/auto-rebase.yml to use a commit SHA instead of @v1 for petry-projects/.github/.github/workflows/auto-rebase-reusable.yml.
Preserve the # v1 inline comment for human-readable version context.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

sonarqubecloud · 2026-05-11T21:41:23Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

donpetry-bot · 2026-06-02T21:08:54Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:09:05Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:09:17Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:09:28Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:09:41Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:09:55Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:10:05Z

Automated review — human attention needed

This PR has been through 3 automated review cycles (cap: 3) without converging on an approval-and-merge state. Further automated review has been paused to avoid infinite loops.

Please take a look manually, or close this PR if it's no longer needed. Once a human review resolves the situation, remove the needs-human-review label and the cascade can be re-engaged on the next push.

Posted by the donpetry-bot PR-review cascade.

donpetry-bot · 2026-06-02T21:10:07Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:10:25Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:10:37Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:10:49Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:11:01Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:11:17Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:11:32Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:11:35Z

Automated review — human attention needed

This PR has been through 3 automated review cycles (cap: 3) without converging on an approval-and-merge state. Further automated review has been paused to avoid infinite loops.

Please take a look manually, or close this PR if it's no longer needed. Once a human review resolves the situation, remove the needs-human-review label and the cascade can be re-engaged on the next push.

Posted by the donpetry-bot PR-review cascade.

donpetry-bot · 2026-06-02T21:11:43Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:11:54Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:12:04Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:12:16Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:12:27Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:12:38Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:12:51Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:13:04Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:13:09Z

Automated review — human attention needed

This PR has been through 3 automated review cycles (cap: 3) without converging on an approval-and-merge state. Further automated review has been paused to avoid infinite loops.

Please take a look manually, or close this PR if it's no longer needed. Once a human review resolves the situation, remove the needs-human-review label and the cascade can be re-engaged on the next push.

Posted by the donpetry-bot PR-review cascade.

donpetry-bot · 2026-06-02T21:13:14Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:13:27Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:13:42Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:13:54Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:14:04Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

donpetry-bot · 2026-06-02T21:14:13Z

@donpetry-bot I'm on it — starting a fresh review now. Results will appear in a few minutes.

fix(ci): pin auto-rebase reusable workflow to SHA

4c23597

Pin petry-projects/.github auto-rebase-reusable.yml from @v1 to SHA 126c1441ee9cf040f2ce3ef0eda85d459b82f8e9 to comply with the org-wide action-pinning policy. Closes #144 Co-authored-by: don-petry <don-petry@users.noreply.github.com>

Copilot AI review requested due to automatic review settings May 1, 2026 13:34

Copilot started reviewing on behalf of don-petry May 1, 2026 13:34 View session

don-petry mentioned this pull request May 1, 2026

Compliance: unpinned-actions-auto-rebase.yml #144

Closed

Copilot AI reviewed May 1, 2026

View reviewed changes

Merge branch 'main' into claude/issue-144-20260501-1332

cd92ed3

This was referenced May 4, 2026

Org Status — 2026-05-04 petry-projects/.github#188

Closed

Org Status — 2026-05-04 petry-projects/.github#190

Closed

Merge branch 'main' into claude/issue-144-20260501-1332

efa16ba

github-actions Bot requested a review from a team as a code owner May 4, 2026 20:38

don-petry mentioned this pull request May 7, 2026

Org Status — 2026-05-07 petry-projects/.github#199

Closed

Merge branch 'main' into claude/issue-144-20260501-1332

ccdd5a3

This was referenced May 9, 2026

Org Status — 2026-05-09 petry-projects/.github#225

Closed

Org Status — 2026-05-10 petry-projects/.github#233

Closed

Merge branch 'main' into claude/issue-144-20260501-1332

317fe01

don-petry closed this May 11, 2026

don-petry reopened this May 11, 2026

don-petry enabled auto-merge (squash) May 12, 2026 01:41

Merge branch 'main' into claude/issue-144-20260501-1332

5f1bfd4

This was referenced May 13, 2026

Org Status — 2026-05-13 petry-projects/.github#284

Closed

Org Status — 2026-05-13 petry-projects/.github#285

Closed

Org Status — 2026-05-14 petry-projects/.github#286

Closed

Merge branch 'main' into claude/issue-144-20260501-1332

ba82039

don-petry mentioned this pull request May 16, 2026

Org Status — 2026-05-16 petry-projects/.github#300

Closed

Merge branch 'main' into claude/issue-144-20260501-1332

4d570d6

don-petry mentioned this pull request May 17, 2026

Org Status — 2026-05-17 petry-projects/.github#310

Closed

Merge branch 'main' into claude/issue-144-20260501-1332

fd9d77f

Uh oh!

Conversation

don-petry commented May 1, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented May 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Possibly related issues

Uh oh!

don-petry commented May 1, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

sonarqubecloud Bot commented May 11, 2026

Quality Gate passed

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Automated review — human attention needed

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Automated review — human attention needed

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Automated review — human attention needed

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

donpetry-bot commented Jun 2, 2026

Uh oh!

don-petry commented May 1, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented May 1, 2026 •

edited

Loading