From 6605df57525d48d82b257b7a13b26e90f5628fcb Mon Sep 17 00:00:00 2001 From: PJ Date: Sat, 15 Aug 2026 12:46:49 +0530 Subject: [PATCH] ci: pin buf-setup-action to a commit it takes a token now, so a floating tag is a token handed to whatever that tag moves to. note v1 there is a branch, not a tag, so the ref lookup that resolves it is matching-refs/heads/v1. --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 8268669..2e17655 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -59,7 +59,7 @@ jobs: # up` after three retries. The version is the action's own default, made # explicit so a new action release cannot move the buf we build with. - name: Install buf - uses: bufbuild/buf-setup-action@v1 + uses: bufbuild/buf-setup-action@a47c93e0b1648d5651a065437926377d060baa99 # v1.50.0 with: version: "1.50.0" github_token: ${{ secrets.GITHUB_TOKEN }}