chore(ci): pin typos action to v1.31.2 for reproducible builds #1845

pull strmfos wants to merge 1 commits into bitcoin:master from strmfos:master changing 1 files +1 −1

strmfos commented at 9:07 PM on May 1, 2025: none

Replace crate-ci/typos@master with the stable release tag crate-ci/typos@v1.31.2 (2025-04-28).
Pinning avoids breaking changes from the moving master branch and aligns with GitHub Actions security best practices for deterministic CI runs.
Release notes
chore(ci): pin typos action to v1.31.2 for reproducible builds 2fa025b4a8
in .github/workflows/github-action-checks.yml:31 in 2fa025b4a8
```
  27 | @@ -28,4 +28,4 @@ jobs:
  28 |          uses: actions/checkout@v4
  29 |  
  30 |        - name: Check spelling
  31 | -        uses: crate-ci/typos@master
  32 | +        uses: crate-ci/typos@v1.31.0
```
jonatack commented at 9:39 PM on May 1, 2025:

v1.31.2 is the current release of typos.

I think it's fine to leave it at master rather than periodically upgrading the versions.

This repository isn't a codebase that needs to be compiled, so having reproducible builds isn't a rationale here.

strmfos commented at 6:11 AM on May 2, 2025:

okey , thank you !
strmfos closed this on May 2, 2025

Contributors