Repository navigation
build(tools): pin reproducible developer tools - #108
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
Pin developer tools to tested versions for reproducible installations.
Match the spelling checker and test runner versions in local configuration and hosted workflows.
Changes
Replace moving tool selectors with exact versions.
Generate four official libwebp archive URLs from one pinned version.
Track that version through a TOML query and the declared GitHub tags endpoint.
Track the existing
cargo-sortinstallation commands in both quality workflows.Closes #95.
Validation
The full source gate passed on macOS with the selected tool versions, including 1,246 tests and 21 documentation tests.
All ten workflow contract tests passed after integrating the current dependency updates.
Linux and Windows installed the declared libwebp archives and ran both reference executables at version 1.6.0.
All project tool declarations resolve to installed exact versions.
The workflow security check and Gitleaks staged-diff scan passed.
Official Renovate validation and local dependency extraction passed.
Extraction finds one libwebp declaration and both workflow declarations for the sorter.
The official Renovate updater changes only the libwebp version and preserves all four archive templates.
@coderabbitai ignore