From 827d6189388ef80fb5b95f14f6f4febc403e1645 Mon Sep 17 00:00:00 2001
From: Olufunke Moronfolu <olufunke.moronfolu@mendix.com>
Date: Thu, 2 Jul 2026 12:39:35 +0200
Subject: [PATCH] adds notes for action allowlist to prevent workflow failure

---
 .github/workflows/branch-deletion-pr-creation.yml | 3 +++
 .github/workflows/lint-action.yml                 | 5 ++++-
 .github/workflows/remunusedattachments.yml        | 3 +++
 3 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/branch-deletion-pr-creation.yml b/.github/workflows/branch-deletion-pr-creation.yml
index 252a525eb6b..912e97963d7 100644
--- a/.github/workflows/branch-deletion-pr-creation.yml
+++ b/.github/workflows/branch-deletion-pr-creation.yml
@@ -113,6 +113,9 @@ jobs:
           echo "BRANCHES_TOO_RECENT=$(printf -- '- %s\n' "${BRANCHES_TOO_RECENT[@]}" | jq -Rs .)" >> $GITHUB_ENV
           echo "UNMERGED_BRANCHES=$(printf -- '- %s\n' "${UNMERGED_BRANCHES[@]}" | jq -Rs .)" >> $GITHUB_ENV
 
+      # NOTE: If you upgrade the version of this action, you must also update the
+      # GitHub Actions allowlist in mendix/docs > Settings > Actions > General
+      # to permit the new version tag, otherwise the workflow will fail.
       - name: Create Deletion PR
         if: env.HAS_BRANCHES == 'true'
         uses: peter-evans/create-pull-request@v8
diff --git a/.github/workflows/lint-action.yml b/.github/workflows/lint-action.yml
index fa412a09278..018b9d2882d 100644
--- a/.github/workflows/lint-action.yml
+++ b/.github/workflows/lint-action.yml
@@ -44,7 +44,10 @@ jobs:
           echo "VER<<EOF" >> $GITHUB_ENV
           echo "$VER" >> $GITHUB_ENV
           echo "EOF" >> $GITHUB_ENV
-      # Creates PR for linted content changes - needs version > 6 for NodeJS 24
+      # Creates PR for linted content changes
+      # NOTE: If you upgrade the version of this action, you must also update the
+      # GitHub Actions allowlist in mendix/docs > Settings > Actions > General
+      # to permit the new version tag, otherwise the workflow will fail.
       - name: Create pull request
         uses: peter-evans/create-pull-request@v8
         with:
diff --git a/.github/workflows/remunusedattachments.yml b/.github/workflows/remunusedattachments.yml
index 964a917b0f7..e6bd2c2d240 100644
--- a/.github/workflows/remunusedattachments.yml
+++ b/.github/workflows/remunusedattachments.yml
@@ -27,6 +27,9 @@ jobs:
       - run: python _scripts/removeUnusedAttachments.py
 
       # Creates pull request
+      # NOTE: If you upgrade the version of this action, you must also update the
+      # GitHub Actions allowlist in mendix/docs > Settings > Actions > General
+      # to permit the new version tag, otherwise the workflow will fail.
       - name: Create Pull Request
         uses: peter-evans/create-pull-request@v8
         with: