From aafd11c440c4822332def730f8a38ab4b87209cf Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 10 Feb 2026 15:04:26 +0000
Subject: [PATCH 1/2] Initial plan


From 6d24bef480b86791c9d21c1a6e52d5da20d39465 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 10 Feb 2026 15:13:18 +0000
Subject: [PATCH 2/2] Update action pin SHAs in runtime integration tests

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
---
 pkg/workflow/runtime_integration_test.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkg/workflow/runtime_integration_test.go b/pkg/workflow/runtime_integration_test.go
index e0eb0a5607..ed3557d346 100644
--- a/pkg/workflow/runtime_integration_test.go
+++ b/pkg/workflow/runtime_integration_test.go
@@ -239,7 +239,7 @@ Test workflow with runtime overrides applied to steps.
 	lockStr := string(lockContent)
 
 	// Verify that Node.js setup step is included with version 22
-	if !strings.Contains(lockStr, "actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f") {
+	if !strings.Contains(lockStr, "actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238") {
 		t.Error("Expected setup-node action in lock file")
 	}
 	if !strings.Contains(lockStr, "node-version: '22'") {
@@ -355,7 +355,7 @@ Test workflow that uses Go without go.mod file.
 	if !strings.Contains(lockStr, "Setup Go") {
 		t.Error("Expected 'Setup Go' step in lock file")
 	}
-	if !strings.Contains(lockStr, "actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c") {
+	if !strings.Contains(lockStr, "actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5") {
 		t.Error("Expected actions/setup-go action in lock file")
 	}
 	if !strings.Contains(lockStr, "go-version: '1.25'") {