From 3b0f8ebb0f39644882c1c269fe731513418f51ef Mon Sep 17 00:00:00 2001 From: Anthony Vitacco Date: Thu, 13 Aug 2026 17:29:35 -0400 Subject: [PATCH 1/4] Fixing a repo security issue Signed-off-by: Anthony Vitacco --- .github/workflows/docs-test.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/docs-test.yml b/.github/workflows/docs-test.yml index 0c7e988..b98e074 100644 --- a/.github/workflows/docs-test.yml +++ b/.github/workflows/docs-test.yml @@ -5,6 +5,9 @@ on: branches: [main] workflow_dispatch: +permissions: + contents: read + jobs: internal_links: runs-on: ubuntu-latest From edfc8b93d765dec11fe23967fa05ac89b427b038 Mon Sep 17 00:00:00 2001 From: Anthony Vitacco Date: Tue, 18 Aug 2026 08:54:01 -0400 Subject: [PATCH 2/4] Appropriate sacrifices made, hopefully the yaml gods be pleased Signed-off-by: Anthony Vitacco --- .github/workflows/docs-test.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/docs-test.yml b/.github/workflows/docs-test.yml index b98e074..4b2427f 100644 --- a/.github/workflows/docs-test.yml +++ b/.github/workflows/docs-test.yml @@ -1,3 +1,4 @@ +--- name: Test docs on: From 0e1bfa322a777b2708789489e9f54d4f4c0b468e Mon Sep 17 00:00:00 2001 From: Anthony Vitacco Date: Wed, 19 Aug 2026 08:17:44 -0400 Subject: [PATCH 3/4] Updated to latest versions of all pipeline components * Used pinact to pin to specific hashes Signed-off-by: Anthony Vitacco --- .github/workflows/docs-test.yml | 10 +++++----- .github/workflows/docs.yml | 16 ++++++++-------- 2 files changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/docs-test.yml b/.github/workflows/docs-test.yml index 4b2427f..a5bd465 100644 --- a/.github/workflows/docs-test.yml +++ b/.github/workflows/docs-test.yml @@ -13,14 +13,14 @@ jobs: internal_links: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: - node-version: 22 + node-version: 26 cache: npm - - uses: ruby/setup-ruby@v1 + - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0 with: - ruby-version: '3.4' + ruby-version: '4.0' bundler-cache: true working-directory: docs - run: npm ci diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index beb7410..ec69877 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -18,20 +18,20 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: - node-version: 22 + node-version: 26 cache: npm - - uses: ruby/setup-ruby@v1 + - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0 with: - ruby-version: '3.4' + ruby-version: '4.0' bundler-cache: true working-directory: docs - - uses: actions/configure-pages@v5 + - uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0 - run: npm ci - run: npm run docs:build - - uses: actions/upload-pages-artifact@v3 + - uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0 with: path: docs/_site @@ -43,4 +43,4 @@ jobs: url: ${{ steps.deployment.outputs.page_url }} steps: - id: deployment - uses: actions/deploy-pages@v4 + uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0 From 156d4b166048246eb9eb4f26f8cbe4e06bf18b4d Mon Sep 17 00:00:00 2001 From: Anthony Vitacco Date: Wed, 19 Aug 2026 08:19:53 -0400 Subject: [PATCH 4/4] Adding the yaml file start --- I forgot to add --- to `docs.yaml` this has been corrected Signed-off-by: Anthony Vitacco --- .github/workflows/docs.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index ec69877..79a294e 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -1,3 +1,4 @@ +--- name: Deploy docs on: