ci: pin auto-rebase-reusable.yml to SHA (fixes #115)

[donpetry-bot]

Summary

Pin the reusable workflow reference in auto-rebase.yml to its commit SHA instead of the mutable @v1 tag, per the action-pinning policy.

Change:

• petry-projects/.github/.github/workflows/auto-rebase-reusable.yml@v1
• → petry-projects/.github/.github/workflows/auto-rebase-reusable.yml@0cb4bba11d7563bf197ad805f12fb8639e4879e4 # v1

SHA verified via gh api repos/petry-projects/.github/git/refs/tags/v1.

Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Updated internal automation workflow configuration for improved stability.

[gemini-code-assist]

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

[donpetry-bot]

@petry-projects/org-leads — this PR is ready for review and merge. It pins the reusable workflow to a SHA to resolve compliance finding #115.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 47f0f1fb-b3d0-42fa-8daf-978aee077e04

📥 Commits

Reviewing files that changed from the base of the PR and between 2593a0a and e4ffc21.

📒 Files selected for processing (1)

• .github/workflows/auto-rebase.yml

---

📝 Walkthrough

Walkthrough

This PR pins the auto-rebase reusable workflow reference to a specific commit SHA (0cb4bba11d7563bf197ad805f12fb8639e4879e4) instead of the @v1 tag, ensuring reproducible and compliant workflow execution.

Changes

Workflow Reference Pinning

Layer / File(s)	Summary
Reusable Workflow Reference Pinning .github/workflows/auto-rebase.yml	The auto-rebase job's uses field is pinned from petry-projects/.github/.github/workflows/auto-rebase-reusable.yml@v1 to petry-projects/.github/.github/workflows/auto-rebase-reusable.yml@0cb4bba11d7563bf197ad805f12fb8639e4879e4.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related issues

• Compliance: unpinned-actions-auto-rebase.yml #115: Compliance: unpinned-actions-auto-rebase.yml — This PR directly addresses the compliance finding by pinning the unpinned reusable workflow reference to a specific commit SHA.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: pinning auto-rebase-reusable.yml to a specific SHA to resolve compliance issue #115.
Linked Issues check	✅ Passed	The pull request successfully addresses issue #115 by replacing the unpinned reusable workflow reference @v1 with a pinned commit SHA, fully complying with the action-pinning policy requirement.
Out of Scope Changes check	✅ Passed	All changes are scoped to the stated objective: only the auto-rebase workflow reference is updated from @v1 to a commit SHA, with no other modifications.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch claude/issue-115-20260511-1236

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud