From efa97e598ba3972b3a5d174eabb3253b24f8ba75 Mon Sep 17 00:00:00 2001
From: Mason Daugherty <mason@langchain.dev>
Date: Wed, 8 Apr 2026 20:18:14 -0400
Subject: [PATCH] docs(infra): note sha pinning requirement in agent files
 (#36625)

Following #36621
---
 AGENTS.md | 4 ++++
 CLAUDE.md | 4 ++++
 2 files changed, 8 insertions(+)

diff --git a/AGENTS.md b/AGENTS.md
index 681e20fb0d3..cf32ad99a3e 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -247,6 +247,10 @@ When adding a new partner package, update these files:
 - `.github/workflows/integration_tests.yml` – Add integration test config
 - `.github/workflows/pr_lint.yml` – Add to allowed scopes
 
+## GitHub Actions & Workflows
+
+This repository require actions to be pinned to a full-length commit SHA. Attempting to use a tag will fail. Use the `gh` cli to query. Verify tags are not annotated tag objects (which would need dereferencing).
+
 ## Additional resources
 
 - **Documentation:** https://docs.langchain.com/oss/python/langchain/overview and source at https://github.com/langchain-ai/docs or `../docs/`. Prefer the local install and use file search tools for best results. If needed, use the docs MCP server as defined in `.mcp.json` for programmatic access.
diff --git a/CLAUDE.md b/CLAUDE.md
index 681e20fb0d3..cf32ad99a3e 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -247,6 +247,10 @@ When adding a new partner package, update these files:
 - `.github/workflows/integration_tests.yml` – Add integration test config
 - `.github/workflows/pr_lint.yml` – Add to allowed scopes
 
+## GitHub Actions & Workflows
+
+This repository require actions to be pinned to a full-length commit SHA. Attempting to use a tag will fail. Use the `gh` cli to query. Verify tags are not annotated tag objects (which would need dereferencing).
+
 ## Additional resources
 
 - **Documentation:** https://docs.langchain.com/oss/python/langchain/overview and source at https://github.com/langchain-ai/docs or `../docs/`. Prefer the local install and use file search tools for best results. If needed, use the docs MCP server as defined in `.mcp.json` for programmatic access.