Pin `setup-python` action to a commit hash - part 2 by ShaharNaveh · Pull Request #7493 · RustPython/RustPython

ShaharNaveh

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yml

Review profile: CHILL

Plan: Pro

Run ID: 2a702950-9b2d-4cce-9b03-4daf10990582

📥 Commits

Reviewing files that changed from the base of the PR and between d3f062e and 4f5dd83.

📒 Files selected for processing (1)

.github/workflows/cron-ci.yaml

✅ Files skipped from review due to trivial changes (1)

.github/workflows/cron-ci.yaml

📝 Walkthrough

Walkthrough

Pinned actions/setup-python to a specific commit SHA in multiple cron CI jobs and added blank-line formatting around those steps in the workflow YAML. No other workflow logic or step inputs were changed.

Changes

Cohort / File(s)	Summary
Workflow Configuration `.github/workflows/cron-ci.yaml`	Updated `actions/setup-python` ref from `v6.2.0` to commit `a309ff8b426b58ec0e2a45f0f869d46889d02405` (annotated `# v6.2.0`) in the `codecov`, `whatsleft`, and `benchmark` jobs; added surrounding blank lines for readability. No other inputs, commands, or job flow altered.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

Cleanup release.yml a bit #7499 — pins third-party GitHub Actions to commit SHAs in workflow files (related pattern).
Pin setup-python action to a commit hash - part 3 #7494 — pins actions/setup-python to the same commit SHA in another workflow file.
Pin setup-python action to a commit hash - part 1 #7492 — applies the identical actions/setup-python SHA pin in a workflow YAML.

Suggested labels

skip:ci

Suggested reviewers

youknowone
fanninpm
coolreader18

Poem

🐇 I hop through YAML, tidy and spry,
Pinning a hash so actions don't fly,
Blank lines tucked neat, each step in its place,
Cron hums along at a calm, steady pace.

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: pinning the setup-python action to a commit hash in the cron-ci workflow, which is part 2 of this work.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}