GITHUB ACTIONS WORKFLOW LOCKFILES IN PUBLIC PREVIEW

Summary from the TLDR DevOps newsletter

GitHub Actions workflow lockfiles pin actions and their transitive dependencies to reviewed commits while preserving readable tags in workflow files. The public preview includes a GitHub CLI extension to generate lockfiles, Dependabot integration to update them, and policies that require workflows to use them.