Skip to content

devops(bots): pin the shared actions to a commit SHA - #43923

Merged
Pavel Feldman (pavelfeldman) merged 1 commit into
microsoft:mainfrom
pavelfeldman:pin-shared-actions
Nov 5, 2026
Merged

Pavel Feldman (pavelfeldman) merged 1 commit into
microsoft:mainfrom
pavelfeldman:pin-shared-actions

Conversation

@pavelfeldman

Copy link
Copy Markdown
Member

All actions in workflows must now be pinned to a full commit SHA, including our own. revision.yml still called rebase-pr, run-agent and publish-calls at @main.

  • Pins them to d1518e3e3fca90352c4390814943cced496fd7e4, the current head of main, so the same code runs as today.
  • Updates bots.md and the ci-env description, which described the @main behavior. A change to a shared action now reaches a repo when its pin moves, so the docs say how to roll one out.

The revision jobs only run from main, so they first use the pin after this lands.

@github-actions

github-actions Bot commented Nov 5, 2026

Copy link
Copy Markdown
Contributor

Test results for "tests 1"

1 flaky ⚠️ [webkit-page] › page/page-screenshot.spec.ts:990 › page screenshot animations › SS-064 should wait for fonts to load `@webkit-playwright-x64-ubuntu24-64-core-node22`

23587 passed, 705 skipped


Merge workflow run.

@github-actions

github-actions Bot commented Nov 5, 2026

Copy link
Copy Markdown
Contributor

Test results for "MCP"

5194 passed, 616 skipped


Merge workflow run.

@pavelfeldman
Pavel Feldman (pavelfeldman) merged commit edeb0bd into microsoft:main Nov 5, 2026
24 checks passed
Pavel Feldman (pavelfeldman) added a commit to microsoft/playwright-cli that referenced this pull request Nov 5, 2026
All actions in workflows must now be pinned to a full commit SHA,
including our own. This repo still called the shared actions from
`microsoft/playwright` at `@main`.

Pins them to `d1518e3e3fca90352c4390814943cced496fd7e4`, the current
head of `main` there, so the same code runs as today. Covers
`setup-triage-runner`, `release.yml`, `revision.yml`, `roll.yml`,
`triage.yml`.

A change to a shared action now reaches this repo when its pin moves,
see microsoft/playwright#43923. The triage and revision bots only run
from `main`, so they first use the pin after this lands.
Pavel Feldman (pavelfeldman) added a commit to microsoft/playwright-mcp that referenced this pull request Nov 5, 2026
All actions in workflows must now be pinned to a full commit SHA,
including our own. This repo still called the shared actions from
`microsoft/playwright` at `@main`.

Pins them to `d1518e3e3fca90352c4390814943cced496fd7e4`, the current
head of `main` there, so the same code runs as today. Covers
`setup-triage-runner`, `release.yml`, `revision.yml`, `roll.yml`,
`triage.yml`.

A change to a shared action now reaches this repo when its pin moves,
see microsoft/playwright#43923. The triage and revision bots only run
from `main`, so they first use the pin after this lands.
Pathfinder Team (PM-Labs) pushed a commit to pmlabs-org/mcp-playwright that referenced this pull request Nov 8, 2026
All actions in workflows must now be pinned to a full commit SHA,
including our own. This repo still called the shared actions from
`microsoft/playwright` at `@main`.

Pins them to `d1518e3e3fca90352c4390814943cced496fd7e4`, the current
head of `main` there, so the same code runs as today. Covers
`setup-triage-runner`, `release.yml`, `revision.yml`, `roll.yml`,
`triage.yml`.

A change to a shared action now reaches this repo when its pin moves,
see microsoft/playwright#43923. The triage and revision bots only run
from `main`, so they first use the pin after this lands.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants