Skip to content

docs(renovate): drop redundant uses-line annotations in onboarding guide and workflows #192

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
Copilot wants to merge 3 commits into
base: main
Choose a base branch
from
+5 −7
Draft

docs(renovate): drop redundant uses-line annotations in onboarding guide and workflows #192

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
dc0b766
Initial plan
Copilot Jun 20, 2026
af56fe2
docs(renovate): drop redundant uses-line annotation from onboarding g…
Copilot Jun 20, 2026
306538a
refactor(renovate): drop inert uses-line annotations from workflows
Copilot Jun 20, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 0 additions & 1 deletion .github/workflows/config-sync.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -170,7 +170,6 @@ jobs:
--force
- name: Create PR if configs changed
if: steps.pull.outputs.updated == '1'
# renovate: datasource=github-tags depName=DevSecNinja/.github
uses: DevSecNinja/.github/actions/open-pr@c1725a7573e1cb5277889d925901b477ee814352 # v1.7.0
with:
branch: chore/config-sync
Expand Down
1 change: 0 additions & 1 deletion .github/workflows/release-please-caller.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,6 @@ jobs:
release-please:
# Self-reference: same repo, pinned to the SHA that introduced the
# App-token wiring. Re-pin to the next vX.Y.Z tag once cut.
# renovate: datasource=github-tags depName=DevSecNinja/.github
uses: DevSecNinja/.github/.github/workflows/release-please.yml@fa92001d3877b58e3c8f8b0fa2f6f9230fbb0792 # main
permissions:
contents: write
Expand Down
2 changes: 0 additions & 2 deletions .github/workflows/release-please.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -97,7 +97,6 @@ jobs:
- name: Generate App token
id: app-token
if: inputs.app-id != ''
# renovate: datasource=github-releases depName=actions/create-github-app-token
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
with:
app-id: ${{ inputs.app-id }}
Expand All @@ -110,7 +109,6 @@ jobs:

- name: Run release-please
id: release-please
# renovate: datasource=github-releases depName=googleapis/release-please-action
uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
with:
target-branch: ${{ inputs.target-branch }}
Expand Down
1 change: 0 additions & 1 deletion .github/workflows/vendored-file-sync.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -149,7 +149,6 @@ jobs:
- name: Open or update vendored-file sync PR
id: open-pr
if: ${{ inputs.create-pr && steps.detect.outputs.changed == 'true' }}
# renovate: datasource=github-tags depName=DevSecNinja/.github
uses: DevSecNinja/.github/actions/open-pr@c1725a7573e1cb5277889d925901b477ee814352 # v1.7.0
with:
branch: ${{ inputs.branch }}
Expand Down
7 changes: 5 additions & 2 deletions docs/release-please-onboarding.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -122,7 +122,6 @@ concurrency:
cancel-in-progress: false
jobs:
release-please:
# renovate: datasource=github-tags depName=DevSecNinja/.github
uses: DevSecNinja/.github/.github/workflows/release-please.yml@<sha> # vX.Y.Z
permissions:
contents: write
Expand All @@ -134,7 +133,11 @@ jobs:
```

Pin `<sha>` to a release-tagged commit of `DevSecNinja/.github`. The
`# renovate:` comment lets Renovate auto-bump it when new tags ship.
`# vX.Y.Z` version comment on the `uses:` line is all Renovate needs:
its GitHub Actions manager tracks reusable-workflow callers natively and
auto-bumps both the pinned SHA and the comment when new tags ship. No
separate `# renovate:` annotation is required (and adding one is dropped
on the next bump).

#### `release-please-config.json`

Expand Down