crate-ci/typos@master
with the stable release tag crate-ci/typos@v1.31.2
(2025-04-28).Pinning avoids breaking changes from the moving
master
branch and aligns with GitHub Actions security best practices for deterministic CI runs.Release notes
crate-ci/typos@master
with the stable release tag crate-ci/typos@v1.31.2
(2025-04-28).master
branch and aligns with GitHub Actions security best practices for deterministic CI runs.27@@ -28,4 +28,4 @@ jobs:
28 uses: actions/checkout@v4
29
30 - name: Check spelling
31- uses: crate-ci/typos@master
32+ uses: crate-ci/typos@v1.31.0
v1.31.2 is the current release of typos.
I think it’s fine to leave it at master rather than periodically upgrading the versions.
This repository isn’t a codebase that needs to be compiled, so having reproducible builds isn’t a rationale here.