Mason Daugherty 6443612fa3 ci: pin all actions to full-length commit SHAs (#36621) ...

Pin all remaining GitHub Actions references to full-length commit SHAs,
matching the convention already established by third-party actions in
this repo. This is a prerequisite for enabling GitHub's "Require actions
to be pinned to a full-length commit SHA" repository ruleset, which
mitigates tag-hijacking supply chain attacks.

2026-04-08 19:02:58 -04:00

..

actions/uv_setup

ci(infra): add top-level permissions and SHA-pin third-party actions [INF-0000] (#35588)

2026-03-06 07:20:05 +00:00

images

Add files via upload

2026-03-02 10:47:31 -05:00

ISSUE_TEMPLATE

ci: bypass issue-link gate for trusted contributors (#35720)

2026-03-10 12:01:07 -04:00

scripts

ci: convert working-directory to validated dropdown (#36575)

2026-04-06 22:46:11 -04:00

tools

chore: formatting across codebase (#32466)

2025-08-08 10:20:10 -04:00

workflows

ci: pin all actions to full-length commit SHAs (#36621)

2026-04-08 19:02:58 -04:00

CODEOWNERS

chore: update PR template, CODEOWNERS (#34999)

2026-02-03 12:59:41 -05:00

dependabot.yml

chore(infra): update dependabot.yml to monthly schedule with update-type split [INF-0000] (#35587)

2026-03-05 23:18:22 -08:00

PULL_REQUEST_TEMPLATE.md

ci: bypass issue-link gate for trusted contributors (#35720)

2026-03-10 12:01:07 -04:00