Sebastian Poxhofer 69e05233e8 feat(manager/github-actions): add workflow depType for reusable workflow calls (#45443) ...

* feat(manager/github-actions): add `workflow` depType for reusable workflow calls

A job-level `uses:` pointing at `owner/repo/.github/workflows/<file>.yml@<ref>`
calls a reusable workflow rather than running an action, but both got the
`action` depType, so `matchDepTypes` could not tell them apart.

Give a reference whose sub-path is exactly `.github/workflows/<file>.yml|.yaml`
the new `workflow` depType. Every other sub-path, such as
`github/codeql-action/init`, stays an action.

The existing depType-keyed sites now accept both values, so nothing else
changes behaviour: the `actions.lock` file records reusable workflow calls too,
and `helpers:pinGitHubActionDigests` pinned them before this split.

* Apply suggestions from code review

Co-authored-by: Sebastian Poxhofer <secustor@users.noreply.github.com>

2026-08-25 11:52:05 +00:00

..

datasource

fix(linters): forbid inert counts in v8 coverage-ignore comments (#45287)

2026-08-22 11:25:31 +00:00

manager

feat(manager/github-actions): add workflow depType for reusable workflow calls (#45443)

2026-08-25 11:52:05 +00:00

platform

fix(platform/azure): detect hosted deployment when deploymentType is a string (#45440)

2026-08-25 10:35:24 +00:00

versioning

fix(linters): add linting rule to enforce usage of our regEx utility (#44690)

2026-08-14 14:30:46 +00:00