fix(ci): pin upload-artifact to valid SHA in fix-unpinned-actions.sh generator (Refs standards#48) (#163)

hyperpolymath · web-flow · commit f9bed638beda · 2026-05-18T10:25:29.000+01:00
Generator mapped actions/upload-artifact@v4 to nonexistent SHA 65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478,
re-arming the bug across all hypatia-scan.yml consumers. -&gt; ea165f8d65b6e75b540449e92b4886f43607fa02.
diff --git a/scripts/fix-unpinned-actions.sh b/scripts/fix-unpinned-actions.sh
@@ -34,7 +34,7 @@ declare -A ACTION_PINS=(
     ["actions/upload-pages-artifact@v3"]="56afc609e74202658d3ffba0e8f6dda462b719fa"
     ["actions/deploy-pages@v4"]="d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e"
     ["ruby/setup-ruby@v1"]="09a7688d3b55cf0e976497ff046b70949eeaccfd"
-    ["actions/upload-artifact@v4"]="65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478"
+    ["actions/upload-artifact@v4"]="ea165f8d65b6e75b540449e92b4886f43607fa02"
 )
 
 # Find all workflow files in repo

Original file line number	Diff line number	Diff line change
`@@ -34,7 +34,7 @@ declare -A ACTION_PINS=(`
`34`	`34`	`["actions/upload-pages-artifact@v3"]="56afc609e74202658d3ffba0e8f6dda462b719fa"`
`35`	`35`	`["actions/deploy-pages@v4"]="d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e"`
`36`	`36`	`["ruby/setup-ruby@v1"]="09a7688d3b55cf0e976497ff046b70949eeaccfd"`
`37`		`- ["actions/upload-artifact@v4"]="65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478"`
	`37`	`+ ["actions/upload-artifact@v4"]="ea165f8d65b6e75b540449e92b4886f43607fa02"`
`38`	`38`	`)`
`39`	`39`
`40`	`40`	`# Find all workflow files in repo`