[babblebey]

Description

This pull request updates several GitHub Actions workflows and improves the reliability and security of the vector store update process. The main changes include pinning GitHub Actions to specific commit hashes, enforcing stricter validation of dictionary slugs, and improving the handling of CLI arguments and environment variables for vector store updates.

Workflow hardening and dependency pinning:

• All GitHub Actions in workflow files (such as actions/checkout, actions/setup-node, actions/upload-artifact, and actions/github-script) are now pinned to specific commit hashes to improve security and reproducibility.

Vector store update improvements:

• Added explicit GitHub token permissions and stricter conditional logic to the update-vector-store.yml workflow, ensuring it only runs on the main branch for manual triggers and only with the correct permissions.
• Improved the detection and validation of dictionary file changes: manual inputs for upsert/delete slugs are now validated with a regex to enforce lowercase letters, digits, and single hyphens. Validation errors now cause the workflow to fail early.
• The update step now passes upsert/delete slugs via environment variables and constructs CLI arguments as arrays, improving reliability and correctness in argument handling.

Dependency updates in dev scripts:

• Updated imports in dev/seed-vector-store.js and dev/update-vector-store.js to use @langchain/classic packages, reflecting upstream package changes.

CLI argument validation:

• Added a parseSlugList function in dev/update-vector-store.js to validate upsert/delete slug arguments, ensuring they conform to the required pattern and providing clear error messages.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
jargons-dev	Ready	Preview	Nov 12, 2026 3:50am UTC