Pin wrapped actions by SHA

[Project516]

Closes #8

action.yml resolved its two dependencies by floating major tag
(subosito/flutter-action@v2, actions/cache@v6). This is published on
the Marketplace, so anyone using Project516/setup-flutter@v1 runs
whatever those tags happen to point at on the day their job starts.

Pins both to full commit SHAs with the version in a trailing comment:

• subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 # v2.23.0
• actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0

Both SHAs verified against git/ref/tags/<tag> via the GitHub API before
committing. renovate.json uses config:recommended, which already
understands this pin shape, so no config change is needed. The README
doesn't reference either wrapped action's version, so nothing to update
there.

Summary by CodeRabbit

• Chores
  • Pinned Flutter setup and caching actions to specific revisions while preserving existing behavior.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: d37f514e-ff4a-4ab6-bc64-472f27eea630

📥 Commits

Reviewing files that changed from the base of the PR and between 0bb915d and 554213d.

📒 Files selected for processing (1)

• action.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

action.yml pins the Flutter setup and cache actions to specific commit SHAs while retaining their existing major-version behavior.

Changes

Action pinning

Layer / File(s)	Summary
Pin action dependencies action.yml	The Flutter setup and cache actions now resolve through pinned commit SHAs instead of floating major tags.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Merge Risk: ⚪ Minimal · up to 55421

This PR replaces floating wrapped-action versions with fixed commit SHAs, with no actionable merge-blocking risk remaining after normal checks and review.

Suggested reviewers: cappy-dev

Poem

A rabbit checks each action’s trail

And pins its hops so tags don’t sail
Flutter waits at a steady place
Cache follows with matching grace
SHA by SHA, the build stays bright

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the primary change: pinning the wrapped actions by commit SHA.
Linked Issues check	✅ Passed	The changes satisfy issue #8 by replacing the floating action references with full commit SHA pins and retaining trailing version comments for Renovate.
Out of Scope Changes check	✅ Passed	The changes are limited to the two action pins required by issue #8. No unrelated files or objectives are included.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[Project516]

@coderabbitai review

[Project516]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.