ci: pin the pantry action to a commit

.github/workflows/README.mdmodified+20-0

Changes to .github/workflows/README.md

		⋯10 linesShow the 10 lines above this hunk@@ -11,3 +11,23 @@ This folder contains the following GitHub Actions:
11	11
12	12	[CI]: ./workflows/ci.yml
13	13	[Release]: ./workflows/release.yml
	14	+
	15	+## Pinned actions
	16	+
	17	+`pantry-pm/pantry/packages/action` is pinned to a commit, not to `@main`.
	18	+
	19	+`@main` means an unrelated push to another repository decides whether every
	20	+job here runs, and on 2026-08-20 that happened twice in one night: first the
	21	+action stopped shipping its built `dist/index.js`, so every job failed at step
	22	+one with `File not found`; then, after that was fixed upstream, the setup step
	23	+began hanging — every job on both Linux and macOS sat on **Setup Pantry** until
	24	+GitHub killed it at the six-hour ceiling.
	25	+
	26	+The pin is `ef37fca8440cdb483fb355fefa5ae3cc6e669a69` (pantry 0.11.36), the
	27	+revision the last fully green run on `main` used.
	28	+
	29	+To bump it: change the SHA everywhere it appears under `.github/workflows/`,
	30	+in one commit, and let CI prove the new revision before it lands. The same
	31	+reasoning applies to the first-party Zig dependencies — see
	32	+[`.github/actions/first-party-zig-deps/pins.env`](../actions/first-party-zig-deps/pins.env).
	33	+

.github/workflows/benchmarks.ymlmodified+1-1

Changes to .github/workflows/benchmarks.yml

		⋯34 linesShow the 34 lines above this hunk@@ -35,7 +35,7 @@ jobs:
35	35	fetch-depth: 0
36	36
37	37	- name: Setup Zig
38		- uses: pantry-pm/pantry/packages/action@main
	38	+ uses: pantry-pm/pantry/packages/action@ef37fca8440cdb483fb355fefa5ae3cc6e669a69 # pantry 0.11.36
39	39	- name: Install Linux dependencies
40	40	run: |
41	41	sudo apt-get update

.github/workflows/binary-size.ymlmodified+1-1

Changes to .github/workflows/binary-size.yml

		⋯48 linesShow the 48 lines above this hunk@@ -49,7 +49,7 @@ jobs:
49	49	fetch-depth: 0
50	50
51	51	- name: Setup Zig
52		- uses: pantry-pm/pantry/packages/action@main
	52	+ uses: pantry-pm/pantry/packages/action@ef37fca8440cdb483fb355fefa5ae3cc6e669a69 # pantry 0.11.36
53	53	- name: Install Linux dependencies
54	54	run: |
55	55	sudo apt-get update

.github/workflows/ci.ymlmodified+7-7

Changes to .github/workflows/ci.yml

		⋯31 linesShow the 31 lines above this hunk@@ -32,7 +32,7 @@ jobs:
32	32	- uses: actions/checkout@v6
33	33
34	34	- name: Setup Pantry (provides Bun, Zig, etc.)
35		- uses: pantry-pm/pantry/packages/action@main
	35	+ uses: pantry-pm/pantry/packages/action@ef37fca8440cdb483fb355fefa5ae3cc6e669a69 # pantry 0.11.36
36	36
37	37	- name: Verify Zig installation
38	38	run: eval "$(pantry env | sed -n '/^export /,$p')" && zig version
		⋯41 linesShow the 41 lines above this hunk@@ -80,7 +80,7 @@ jobs:
80	80	- uses: actions/checkout@v6
81	81
82	82	- name: Setup Pantry (provides Bun, Zig, etc.)
83		- uses: pantry-pm/pantry/packages/action@main
	83	+ uses: pantry-pm/pantry/packages/action@ef37fca8440cdb483fb355fefa5ae3cc6e669a69 # pantry 0.11.36
84	84
85	85	- name: Install dependencies
86	86	run: bun install
		⋯29 linesShow the 29 lines above this hunk@@ -116,7 +116,7 @@ jobs:
116	116	- uses: actions/checkout@v6
117	117
118	118	- name: Setup Pantry (provides Bun, Zig, etc.)
119		- uses: pantry-pm/pantry/packages/action@main
	119	+ uses: pantry-pm/pantry/packages/action@ef37fca8440cdb483fb355fefa5ae3cc6e669a69 # pantry 0.11.36
120	120
121	121	- name: Install dependencies
122	122	run: bun install
		⋯9 linesShow the 9 lines above this hunk@@ -132,7 +132,7 @@ jobs:
132	132	- uses: actions/checkout@v6
133	133
134	134	- name: Setup Pantry (provides Bun, Zig, etc.)
135		- uses: pantry-pm/pantry/packages/action@main
	135	+ uses: pantry-pm/pantry/packages/action@ef37fca8440cdb483fb355fefa5ae3cc6e669a69 # pantry 0.11.36
136	136
137	137	- name: Install dependencies
138	138	run: bun install
		⋯17 linesShow the 17 lines above this hunk@@ -156,7 +156,7 @@ jobs:
156	156	- uses: actions/checkout@v6
157	157
158	158	- name: Setup Pantry (provides Bun, Zig, etc.)
159		- uses: pantry-pm/pantry/packages/action@main
	159	+ uses: pantry-pm/pantry/packages/action@ef37fca8440cdb483fb355fefa5ae3cc6e669a69 # pantry 0.11.36
160	160
161	161	- name: Install dependencies
162	162	run: bun install
		⋯16 linesShow the 16 lines above this hunk@@ -179,7 +179,7 @@ jobs:
179	179	- uses: actions/checkout@v6
180	180
181	181	- name: Setup Pantry (provides Bun, Zig, etc.)
182		- uses: pantry-pm/pantry/packages/action@main
	182	+ uses: pantry-pm/pantry/packages/action@ef37fca8440cdb483fb355fefa5ae3cc6e669a69 # pantry 0.11.36
183	183
184	184	- name: Install dependencies
185	185	run: bun install
		⋯42 linesShow the 42 lines above this hunk@@ -228,7 +228,7 @@ jobs:
228	228	fetch-depth: 0
229	229
230	230	- name: Setup Pantry (provides Bun, Zig, etc.)
231		- uses: pantry-pm/pantry/packages/action@main
	231	+ uses: pantry-pm/pantry/packages/action@ef37fca8440cdb483fb355fefa5ae3cc6e669a69 # pantry 0.11.36
232	232
233	233	- name: Install Dependencies
234	234	run: bun install

.github/workflows/mobile-e2e.ymlmodified+2-2

Changes to .github/workflows/mobile-e2e.yml

		⋯28 linesShow the 28 lines above this hunk@@ -29,7 +29,7 @@ jobs:
29	29	- uses: actions/checkout@v6
30	30
31	31	- name: Setup Zig
32		- uses: pantry-pm/pantry/packages/action@main
	32	+ uses: pantry-pm/pantry/packages/action@ef37fca8440cdb483fb355fefa5ae3cc6e669a69 # pantry 0.11.36
33	33	- name: Setup Xcode
34	34	uses: maxim-lobanov/setup-xcode@v1
35	35	with:
		⋯106 linesShow the 106 lines above this hunk@@ -142,7 +142,7 @@ jobs:
142	142	- uses: actions/checkout@v6
143	143
144	144	- name: Setup Zig
145		- uses: pantry-pm/pantry/packages/action@main
	145	+ uses: pantry-pm/pantry/packages/action@ef37fca8440cdb483fb355fefa5ae3cc6e669a69 # pantry 0.11.36
146	146	- name: Setup Java
147	147	uses: actions/setup-java@v4
148	148	with:

.github/workflows/native-lifecycle.ymlmodified+1-1

Changes to .github/workflows/native-lifecycle.yml

		⋯51 linesShow the 51 lines above this hunk@@ -52,7 +52,7 @@ jobs:
52	52	- uses: actions/checkout@v6
53	53
54	54	- name: Setup Pantry (provides Bun)
55		- uses: pantry-pm/pantry/packages/action@main
	55	+ uses: pantry-pm/pantry/packages/action@ef37fca8440cdb483fb355fefa5ae3cc6e669a69 # pantry 0.11.36
56	56
57	57	- name: Install dependencies
58	58	run: bun install --frozen-lockfile

.github/workflows/release.ymlmodified+3-3

Changes to .github/workflows/release.yml

		⋯29 linesShow the 29 lines above this hunk@@ -30,7 +30,7 @@ jobs:
30	30	fetch-depth: 0
31	31
32	32	- name: Setup Pantry (provides Bun, Zig, etc.)
33		- uses: pantry-pm/pantry/packages/action@main
	33	+ uses: pantry-pm/pantry/packages/action@ef37fca8440cdb483fb355fefa5ae3cc6e669a69 # pantry 0.11.36
34	34
35	35	- name: Install System Dependencies
36	36	if: matrix.platform.deps != ''
		⋯162 linesShow the 162 lines above this hunk@@ -199,7 +199,7 @@ jobs:
199	199	# 2. Auto-packages binaries from zig-out/ into platform-named zips
200	200	# 3. Creates/updates GitHub release with all artifacts + changelog
201	201	- name: Publish & Release
202		- uses: pantry-pm/pantry/packages/action@main
	202	+ uses: pantry-pm/pantry/packages/action@ef37fca8440cdb483fb355fefa5ae3cc6e669a69 # pantry 0.11.36
203	203	with:
204	204	install: 'false'
205	205	publish: 'zig'
		⋯26 linesShow the 26 lines above this hunk@@ -232,7 +232,7 @@ jobs:
232	232	fetch-depth: 0
233	233
234	234	- name: Setup Pantry (provides Bun, Zig, etc.)
235		- uses: pantry-pm/pantry/packages/action@main
	235	+ uses: pantry-pm/pantry/packages/action@ef37fca8440cdb483fb355fefa5ae3cc6e669a69 # pantry 0.11.36
236	236	- name: Install Dependencies
237	237	run: bun install
238	238