Skip to content

chore(deps): update qltysh/qlty-action digest to 0814173 - autoclosed #306

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
renovate wants to merge 1 commit into from
Closed

chore(deps): update qltysh/qlty-action digest to 0814173 - autoclosed #306

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -71,7 +71,7 @@ jobs:
fetch-depth: 0

- name: Install qlty
uses: qltysh/qlty-action/install@781c27d0ba52e67907ade4064dff08d1a797212e
uses: qltysh/qlty-action/install@0814173ae3b13074fc896ca0e8e6d631c8352509

Comment on lines 73 to 75
Copy link
Contributor

@coderabbitai coderabbitai bot Jan 30, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🌐 Web query:

qltysh/qlty-action 0814173ae3b13074fc896ca0e8e6d631c8352509 release

💡 Result:

I couldn’t find any qltysh/qlty-action tag/release that points to commit 0814173ae3b13074fc896ca0e8e6d631c8352509.

The repo’s published releases/tags currently point to other commits (e.g., v2.2.0 → a192421 on Aug 11, 2025), and 0814173… does not appear in the tag list—so it’s likely an untagged commit (i.e., not an official release). [1], [2]

Sources:
[1] https://github.com/qltysh/qlty-action/tags
[2] https://github.com/qltysh/qlty-action/releases/tag/v2.2.0

Use a tagged release for qlty-action instead of an untagged commit.

The digest 0814173ae3b13074fc896ca0e8e6d631c8352509 does not correspond to any official release in the qltysh/qlty-action repository—it's an untagged commit. Use a stable release tag like v2.2.0 instead to improve auditability and reproducibility.

🤖 Prompt for AI Agents 
In @.github/workflows/ci.yml around lines 73 - 75, Replace the untagged commit
reference for the GitHub Action usage
"qltysh/qlty-action/install@0814173ae3b13074fc896ca0e8e6d631c8352509" with a
stable release tag (e.g., change the uses value to
"qltysh/qlty-action/install@v2.2.0" or the repository’s latest official release)
to ensure reproducibility and auditability.

- name: Run qlty check
run: qlty check
Expand Down
Loading