Skip to content

chore: update Layer 4 workflow SHA pins#261

Closed
John-David Dalton (jdalton) wants to merge 2 commits intomainfrom
chore/update-provenance-sha
Closed

chore: update Layer 4 workflow SHA pins#261
John-David Dalton (jdalton) wants to merge 2 commits intomainfrom
chore/update-provenance-sha

Conversation

@jdalton
Copy link
Copy Markdown
Collaborator

Summary

  • Update all Layer 4 _local-not-for-reuse-* workflow SHA pins to be4920f2 (current main)
  • Cascade from Layer 3 change: provenance.yml added set -euo pipefail to setup-script, publish-script, and access-script shell steps

Files updated

  • _local-not-for-reuse-ci.yml — 2 refs
  • _local-not-for-reuse-provenance.yml — 1 ref
  • _local-not-for-reuse-weekly-update.yml — 4 refs

Cascade status

  • Layer 3 change merged to main (be4920f2)
  • Layer 4 PR (this PR)
  • External repo propagation (after this merges)

- Fix inverted skip-build condition in publish.mjs (validated artifacts
  only when skipping build, not when running it)
- Fix duplicate file diff reporting in release-npm-packages.mjs (missing
  file reported as both "missing" and "differs")
- Add set -euo pipefail to provenance.yml shell steps (setup-script,
  publish-script, access-script) to catch failures
- Change bcaKeysMap from Map to WeakMap in make-npm-override.mjs to
  allow garbage collection of browser compat data objects
Cascade from Layer 3 change (provenance.yml set -euo pipefail).
@jdalton John-David Dalton (jdalton) deleted the chore/update-provenance-sha branch April 13, 2026 16:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant