[DerekRoberts]

Canary pin: bcgov/actions v0.12.0 (d209bb08aabe15e5e69aca53b24d338a7b2843d5) and bcgov/actions-openshift v0.7.0 (4ad9f97c20e0e00454bfd35e54537ee8622fa166), release commit SHAs.

---

Thanks for the PR!

Deployments, as required, will be available below:

• Frontend
• API

Please create PRs in draft mode. Mark as ready to enable:

• Analysis Workflow

After merge, new images are deployed in:

• Merge Workflow

[Copilot]

🟡 Changes recommended

The referenced actions contain the invalid uses: $/input-enforcer reference, preventing PR validation and result gates from running until they are rolled back to v0.11.0 or replaced with valid pinned references.

1 open issue

• Replace invalid input-enforcer references with a valid pinned version · New

What changed in this PR

Updates shared GitHub Actions dependencies across the repository’s build, validation, deployment, and maintenance workflows for a canary rollout.

Changes:

• Pins bcgov/actions references to the v0.12.0 release commit.
• Pins bcgov/actions-openshift references to the v0.7.0 release commit.
• Retains full commit SHA pins with matching version comments.

File	Description
.github/​workflows/​scheduled.yml	Updates OpenShift runner pins for scheduled scripts.
.github/​workflows/​pr-validate.yml	Updates PR validation and result-gate action pins.
.github/​workflows/​pr-open.yml	Updates image builder and PR result-gate pins.
.github/​workflows/​pr-close.yml	Updates the cleanup and image-promotion workflow pin.
.github/​workflows/​merge.yml	Updates the image-tracking action pin.
.github/​workflows/​analysis.yml	Updates the analysis result-gate action pin.
.github/​workflows/​.deploy.yml	Updates OpenShift runner pins for deployment steps.

_{Review effort: Balanced}