Repository navigation
[workflow-audit] 1 unexplained change(s) on 2026-10-27 #1393
Description
1 unexplained commit(s) in the audit window (.github/workflows/ .config/tend.yaml .github/audit/ .vscode/ .gitattributes scripts/setup-git.mjs scripts/md-merge.mjs scripts/md-unwrap.mjs) since 2026-10-26T14:09:59Z.
Renovate pin bumps, reproducible tend regenerations, clean merges, and
commits first pushed by an admin are classified and omitted — see the
run summary for what was skipped.
Everything below needs a human to account for it.
0681434 — fix: keep neondatabase/create-branch-action at 6.3.1
- Author: dormouse-bot 287024035+dormouse-bot@users.noreply.github.com (self-declared; not proof of origin)
- First pushed by: dormouse-bot (push)
- Date: 2026-10-27 04:08:54 +0000
- Refs: main,remotes/origin/fix/bash-array-prompt-command remotes/origin/main,remotes/origin/nightly/stale-comments-oct27 remotes/origin/tend/update-workflows
- Files:
.github/workflows/hosted-preview.yml
- View diff
Activity
dormouse-bot commentedon Oct 27, 2026
0681434is the bot's review fix on Renovate's #1386, whichnedtwiggmerged at 04:40 UTC as421c1c0. Renovate's commit on that PR movedneondatabase/create-branch-actionin.github/workflows/hosted-preview.ymltov6.4.0, a stray tag on a commit 12 commits behind6.3.1.0681434put the pin back to6.3.1(fb620d43d4c565abaf088b848a4e28e5c4ea4d9c, which the upstream6.3.1tag resolves to) and added a.github/renovate.jsonrule excludingv6.4.0.The net effect of the merge on
hosted-preview.ymlis nothing: the file onmainis identical before and after421c1c0. The merge's only lasting change is the Renovate rule, and.github/renovate.jsonis outside the audit's paths. The audit flagged the commit because the bot, not Renovate, first pushed it, so it isn't classified as a Renovate pin bump.