I Pinned 31 GitHub Actions to Commit SHAs. One Major Tag Was Two Versions Stale.

Yesterday I pinned 31 GitHub Actions to commit SHAs for a set of workflows I was packaging. Every SHA was resolved from the upstream repository rather than copied from a README or a tutorial, and the process turned up three things worth writing down — including one action whose v3 major tag is two full major versions behind its newest release.... Weiterlesen