chore: hotfix gradle/actions/wrapper-validation tag-object SHA pin#852
Merged
damencho merged 1 commit intoJun 2, 2026
Merged
Conversation
…commit SHA The SHA `48b5f213c81028ace310571dc5ec0fbbca0b2947` from PR #842 is itself an annotated-tag-object SHA for `gradle/actions@v4`, not a commit SHA. GitHub Actions cannot resolve tag-object SHAs as `uses:` refs and fails workflow load with "workflow not found" / "unable to find version". Replacing with the dereferenced commit SHA `ed408507eac070d1f99cc633dbcf757c94c7933a`. Verified: gh api repos/gradle/actions/git/tags/48b5f213c81028ace310571dc5ec0fbbca0b2947 --jq '.object' # {"sha":"ed408507...","type":"commit"} gh api repos/gradle/actions/commits/v4 --jq '.sha' # ed408507... Both occurrences in installers.yml (lines 246, 365) updated. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Hotfix follow-up to merged #842. The SHA
48b5f213c81028ace310571dc5ec0fbbca0b2947was supposed to be the commit SHA forgradle/actions@v4, but it is actually the annotated-tag-object SHA. GitHub Actions cannot resolve tag-object SHAs asuses:refs and fails at workflow load with "workflow not found" / "unable to find version" — the same incident class asunified-analytics-orion#801.Replacing with the dereferenced commit SHA
ed408507eac070d1f99cc633dbcf757c94c7933a(both occurrences ininstallers.yml).Verification
scripts/verify-gha-pins.sh .github/workflowsexits 0 with the fix applied.Test plan
installers.ymlrunswrapper-validationsuccessfully🤖 Generated with Claude Code