Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: Unstructured-IO/github-workflows-public
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: main
Choose a base ref
...
head repository: Unstructured-IO/github-workflows-public
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: chore/enable-renovate
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 1 commit
  • 1 file changed
  • 1 contributor

Commits on Sep 3, 2026

  1. chore(renovate): enable Renovate on this repo 

    Renovate has never run on github-workflows-public. A dry run against the
org's self-hosted Renovate confirms why:

  INFO: Repository started    (repository=Unstructured-IO/github-workflows-public)
  INFO: Repository is disabled - skipping
  "result": "disabled-no-config"

The GitHub App is installed and the clone succeeds ("cloned": true) — the
repo is skipped purely because it has no Renovate config file. The org's
global config (Unstructured-IO/infra, .github/config/renovate/config.js)
sets onboarding: false, and Renovate's requireConfig default is
"required", so a repo with no config is treated as disabled and no
onboarding PR is ever offered.

Consequence: the pinned action digests in .github/workflows/security.yaml
have gone unmaintained since the repo was created on 2026-08-14. The
SocketDev/socket-basics v3.0.0 -> v3.1.0 bump had to be made by hand in #2.

Adds a minimal renovate.json5 that extends config:recommended and
helpers:pinGitHubActionDigests, so every 'uses:' stays pinned to a full
commit SHA. No schedule restriction: this repo pins two actions, so
batching buys nothing while delaying security-scanner fixes.

reviewers is intentionally omitted — the infra team currently has only
'pull' on this repo, and GitHub requires push access to request a team
as a reviewer.
    @william-u10d
    william-u10d committed Sep 3, 2026
    Configuration menu
    Copy the full SHA
    212eff0 View commit details
    Browse the repository at this point in the history
Loading