From e9b2eea5b2ca51b3a6d837bae00f8edc38e75d34 Mon Sep 17 00:00:00 2001
From: Jonas Hahn <herzock@gmail.com>
Date: Mon, 22 Jun 2026 12:59:20 +0200
Subject: [PATCH 1/2] Sign commits for verified programs

---
 .../workflows/update-verified-programs.yaml   | 32 +++++++------------
 1 file changed, 12 insertions(+), 20 deletions(-)

diff --git a/.github/workflows/update-verified-programs.yaml b/.github/workflows/update-verified-programs.yaml
index 49e42efc4..9dc5bf839 100644
--- a/.github/workflows/update-verified-programs.yaml
+++ b/.github/workflows/update-verified-programs.yaml
@@ -46,24 +46,16 @@ jobs:
           MAINNET_RPC_URL: ${{ secrets.MAINNET_RPC_URL }}
         run: pnpm exec tsx scripts/update-verified-programs.ts
 
-      - name: Check for changes
-        id: diff
-        run: |
-          git diff --exit-code public/verified-programs.json && echo "changed=false" >> $GITHUB_OUTPUT || echo "changed=true" >> $GITHUB_OUTPUT
-
       - name: Create or update pull request
-        if: steps.diff.outputs.changed == 'true'
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          branch="chore/update-verified-programs"
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          git checkout -b "$branch"
-          git add public/verified-programs.json
-          git commit -m "chore: update verified programs list"
-          git push -f origin "$branch"
-          gh pr create \
-            --title "chore: update verified programs list" \
-            --body "Automated daily update of verified programs from OSecure." \
-            --base master 2>/dev/null || echo "PR already exists"
+        uses: peter-evans/create-pull-request@v7
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          sign-commits: true
+          commit-message: "chore: update verified programs list"
+          title: "chore: update verified programs list"
+          body: "Automated daily update of verified programs from OSecure."
+          branch: "chore/update-verified-programs"
+          base: master
+          add-paths: public/verified-programs.json
+          maintainer-can-modify: true
+          delete-branch: true

From 8199b423e93a61740bcbfd622a156b1ed8b5f577 Mon Sep 17 00:00:00 2001
From: Jonas Hahn <herzock@gmail.com>
Date: Wed, 1 Jul 2026 12:48:05 +0200
Subject: [PATCH 2/2] Update hash to version 8.1.1

---
 .github/workflows/update-verified-programs.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/update-verified-programs.yaml b/.github/workflows/update-verified-programs.yaml
index 9dc5bf839..c042cce22 100644
--- a/.github/workflows/update-verified-programs.yaml
+++ b/.github/workflows/update-verified-programs.yaml
@@ -2,7 +2,7 @@ name: Update Verified Programs
 
 on:
   schedule:
-    - cron: '0 8 * * *' # Daily at 8 AM UTC
+    - cron: "0 8 * * *" # Daily at 8 AM UTC
   workflow_dispatch:
 
 permissions:
@@ -35,7 +35,7 @@ jobs:
         uses: actions/setup-node@v6
         with:
           node-version: ${{ steps.nvmrc.outputs.NODE_VERSION }}
-          cache: 'pnpm'
+          cache: "pnpm"
           cache-dependency-path: pnpm-lock.yaml
 
       - name: Install dependencies
@@ -47,7 +47,7 @@ jobs:
         run: pnpm exec tsx scripts/update-verified-programs.ts
 
       - name: Create or update pull request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           sign-commits: true