coder

mirror of https://github.com/coder/coder.git synced 2026-11-04 06:44:46 +08:00

Files

T

Jakub Domeracki 28447f16ea ci(.github/workflows): update checkout to v7 (#26909 )

Update GitHub Actions workflows to use `actions/checkout` v7.0.0 pinned
to `9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0`, following the GitHub
Actions checkout hardening changes announced in:

-
https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/
-
https://github.blog/changelog/2026-06-18-control-who-and-what-triggers-github-actions-workflows/

Audited the existing `pull_request_target` workflows and did not add any
`allow-unsafe-pr-checkout` opt-outs, since these workflows do not
intentionally check out fork PR head code.

Generated by Coder Agents.

<details>
<summary>Plan notes</summary>

- Update all `.github/workflows` `actions/checkout` references to v7.0.0
using the pinned SHA.
- Preserve SHA pinning, including the newly added MCP registry workflow.
- Validate that old checkout pins are removed and no unsafe checkout
opt-outs are introduced.

</details>

2026-07-01 10:17:35 +02:00

actions

ci: fix Windows runner PATH casing for mise, not in cli (#25972 )

2026-06-02 10:46:40 +00:00

ISSUE_TEMPLATE

chore: remove needs-triage label from bug template (#22679 )

2026-03-06 10:55:20 +00:00

pr-deployments

chore: update deprecated usage of coder_workspace.owner* fields (#13390 )

2024-05-30 11:31:51 +01:00

scripts

ci: add retry logic for Go module operations (#21609 )