From 2ed6bf3dba5635568c556afb7743b36aa7b653e1 Mon Sep 17 00:00:00 2001 From: "raj.CometChat" <92921875+raj-dubey1@users.noreply.github.com> Date: Mon, 26 Oct 2026 13:06:53 +0530 Subject: [PATCH 1/3] Pin GitHub Actions to commit SHAs in publish-mcp.yml Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_0127KpBfkiKKcFaYsrXLfUd2 --- .github/workflows/publish-mcp.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish-mcp.yml b/.github/workflows/publish-mcp.yml index f3d574e..650cca0 100644 --- a/.github/workflows/publish-mcp.yml +++ b/.github/workflows/publish-mcp.yml @@ -27,7 +27,7 @@ jobs: contents: read steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 - name: Check server.json version matches the release tag if: github.event_name == 'release' From 49a4cfad4e7b851577c96fe8a3f3dfd161d21057 Mon Sep 17 00:00:00 2001 From: "raj.CometChat" <92921875+raj-dubey1@users.noreply.github.com> Date: Mon, 26 Oct 2026 13:07:59 +0530 Subject: [PATCH 2/3] Pin GitHub Actions to commit SHAs in search-eval-drift.yml Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_0127KpBfkiKKcFaYsrXLfUd2 --- .github/workflows/search-eval-drift.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/search-eval-drift.yml b/.github/workflows/search-eval-drift.yml index ffd4a54..c7a8cfb 100644 --- a/.github/workflows/search-eval-drift.yml +++ b/.github/workflows/search-eval-drift.yml @@ -26,7 +26,7 @@ jobs: # the 360-minute default every night. timeout-minutes: 20 steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: path: cometchat-mcp @@ -34,7 +34,7 @@ jobs: # top-level files (docs.json), every .mdx page, and the .md files a page # may import as a snippet (src/search/mdx-imports.ts takes either # extension). - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: repository: cometchat/docs path: cometchat-docs @@ -47,7 +47,7 @@ jobs: **/*.md sparse-checkout-cone-mode: false - - uses: actions/setup-node@v5 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: "24" cache: "npm" From ce69ceb50605146c2d57f0ff527a894a50a317a6 Mon Sep 17 00:00:00 2001 From: "raj.CometChat" <92921875+raj-dubey1@users.noreply.github.com> Date: Mon, 26 Oct 2026 13:09:02 +0530 Subject: [PATCH 3/3] Pin GitHub Actions to commit SHAs in ci.yml Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_0127KpBfkiKKcFaYsrXLfUd2 --- .github/workflows/ci.yml | 28 ++++++++++++++-------------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 46759c0..c2abb93 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -19,9 +19,9 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 - - uses: actions/setup-node@v5 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: "24" cache: "npm" @@ -45,9 +45,9 @@ jobs: index-refresh: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 - - uses: actions/setup-node@v5 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: "24" cache: "npm" @@ -62,17 +62,17 @@ jobs: runs-on: ubuntu-latest needs: test steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: path: cometchat-mcp - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: repository: cometchat/docs path: cometchat-docs ref: main - - uses: actions/setup-node@v5 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: "24" cache: "npm" @@ -89,7 +89,7 @@ jobs: INDEX_PATH: ${{ github.workspace }}/cometchat-mcp/data/index.sqlite run: npm run build:index - - uses: actions/upload-artifact@v7 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: search-index path: cometchat-mcp/data/index.sqlite @@ -105,7 +105,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: path: cometchat-mcp @@ -122,7 +122,7 @@ jobs: # top-level files (docs.json), every .mdx page, and the .md files a page # may import as a snippet (src/search/mdx-imports.ts takes either # extension), so this index matches the one build-index uploads. - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: repository: cometchat/docs path: cometchat-docs @@ -135,7 +135,7 @@ jobs: **/*.md sparse-checkout-cone-mode: false - - uses: actions/setup-node@v5 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: "24" cache: "npm" @@ -175,14 +175,14 @@ jobs: # failed build behind tee's exit status. shell: bash steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 - - uses: docker/setup-buildx-action@v4 + - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 # `docker buildx build` in a run step cannot reach the Actions cache on # its own. Export only the variables its gha cache backend reads. - name: Expose the Actions cache to buildx - uses: actions/github-script@v9 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: script: | for (const k of ['ACTIONS_RUNTIME_TOKEN', 'ACTIONS_RESULTS_URL', 'ACTIONS_CACHE_URL', 'ACTIONS_CACHE_SERVICE_V2']) {