pin actions to commit SHAs in workflows (#744)

* fix basic validation with npm command * Revert "fix basic validation with npm command" This reverts commit 27a0803a2ab96426d0c31f6d2d725ea6fbc20c2f. * pin workflow actions to full commit SHAs with patch * update cooldown * update redundant global.json test and rollForward fields * update cooldown for npm section
2026-06-22 22:29:12 +05:30
parent 95a3f8b067
commit dc3262dda8
5 changed files with 34 additions and 62 deletions
@@ -12,6 +12,8 @@ updates:
    # Check the npm registry for updates every day (weekdays)
    schedule:
      interval: 'weekly'
+    cooldown:
+      default-days: 7

  # Enable version updates for GitHub Actions
  - package-ecosystem: 'github-actions'
@@ -20,3 +22,5 @@ updates:
    directory: '/'
    schedule:
      interval: 'weekly'
+    cooldown:
+      default-days: 7