From 90b49c9fa85ef51ecb6c76407d18df6cf22ff8d5 Mon Sep 17 00:00:00 2001 From: jrfnl Date: Sat, 3 Jan 2026 05:00:03 +0100 Subject: [PATCH] GH Actions: fix pre-existing action runner pins For Dependabot to be able to update pinned action runners, there should be a trailing comment with the tag associated with the pinned hash. These pre-existing comments did not comply with that format. While it does appear not to be a blocker for Dependabot (see 22854), it is still a good idea to follow best practices in this. --- .github/workflows/browserslist-db.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/browserslist-db.yml b/.github/workflows/browserslist-db.yml index 952a105fa15..27b33d14db5 100644 --- a/.github/workflows/browserslist-db.yml +++ b/.github/workflows/browserslist-db.yml @@ -26,7 +26,7 @@ jobs: fetch-depth: 0 - name: Update Browserslist database and create PR - uses: c2corg/browserslist-update-action@a76abb476199caea5399f9e28ff3f16e491ec566 # @v2.5.0 locked to a specific commit to avoid security issues due to a compromised repo. + uses: c2corg/browserslist-update-action@a76abb476199caea5399f9e28ff3f16e491ec566 # v2.5.0 with: github_token: ${{ secrets.GITHUB_TOKEN }} branch: browserslist-update