From f76b27dadf6aba7b773432928f56b511e9d5cbd1 Mon Sep 17 00:00:00 2001 From: Albert Mavashev Date: Tue, 12 May 2026 11:56:50 -0400 Subject: [PATCH] chore(ci): pin reusable workflow to runcycles/.github@v1 Replaces the mutable `@main` ref on the reusable `ci-python.yml` workflow with the stable `v1` tag cut from runcycles/.github after PR #64 landed. Brings the org-internal supply-chain posture in line with the pinned-SHA posture already in use for third-party actions in this repo's python-publish.yml. Within the v1 line the tag moves for backward-compatible changes; breaking changes will bump to v2 with a matching Dependabot bump here. Closes runcycles/.github#60 (for this repo). --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f53a5bd..a2ef9d4 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -11,6 +11,6 @@ permissions: jobs: ci: - uses: runcycles/.github/.github/workflows/ci-python.yml@main + uses: runcycles/.github/.github/workflows/ci-python.yml@v1 with: mypy-target: runcycles