Skip to content

chore: sync docs + api reference for core@1.34.0 #63

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
zuke-build merged 1 commit into from
Aug 8, 2026
Merged

chore: sync docs + api reference for core@1.34.0 #63

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 5 additions & 10 deletions public/llms-full.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10678,19 +10678,14 @@ interface AiReviewWorkflowSpec
`zuke review` then works locally, where no workflow step exists to run.
hardenRunner?: string
The pinned `step-security/harden-runner@<sha>` to harden the runner with.
Defaults to a pin baked in here.

Pass it when the build sources pins from somewhere that stays current — a
generated workflow whose SHA comes from a constant in a published package is
a trap: a bot bumps the committed file, the next run regenerates it from the
stale constant, and the bump is silently reverted.

A bare `owner/repo@<sha>`, without the `# vX.Y.Z` comment the other
generated workflows carry: attaching one needs a core newer than this
package's declared floor, and Dependabot bumps a comment-less pin anyway.
Adopt the richer form once the floor moves past that release.
Supplying this — or {@link checkout} — renders the two separate steps
instead of the prelude action, because naming an action means those
specific actions were asked for. Leave both unset for the default, which
is the one action that does both and carries its own pin.
checkout?: string
The pinned `actions/checkout@<sha>` to check the repository out with.
Like {@link hardenRunner}, supplying it renders the separate steps.
path?: string
Output path. Defaults to the host's conventional location.
name?: string
Expand Down
4 changes: 2 additions & 2 deletions src/data/api.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21168,14 +21168,14 @@
"kind": "property",
"optional": true,
"signature": "hardenRunner?: string",
"doc": "The pinned `step-security/harden-runner@<sha>` to harden the runner with.\nDefaults to a pin baked in here.\n\nPass it when the build sources pins from somewhere that stays current — a\ngenerated workflow whose SHA comes from a constant in a published package is\na trap: a bot bumps the committed file, the next run regenerates it from the\nstale constant, and the bump is silently reverted.\n\nA bare `owner/repo@<sha>`, without the `# vX.Y.Z` comment the other\ngenerated workflows carry: attaching one needs a core newer than this\npackage's declared floor, and Dependabot bumps a comment-less pin anyway.\nAdopt the richer form once the floor moves past that release."
"doc": "The pinned `step-security/harden-runner@<sha>` to harden the runner with.\n\nSupplying this — or {@link checkout} — renders the two separate steps\ninstead of the prelude action, because naming an action means those\nspecific actions were asked for. Leave both unset for the default, which\nis the one action that does both and carries its own pin."
},
{
"name": "checkout",
"kind": "property",
"optional": true,
"signature": "checkout?: string",
"doc": "The pinned `actions/checkout@<sha>` to check the repository out with."
"doc": "The pinned `actions/checkout@<sha>` to check the repository out with.\nLike {@link hardenRunner}, supplying it renders the separate steps."
},
{
"name": "path",
Expand Down
Loading