SAP · davidkna-sap · Sep 10, 2026 · Sep 9, 2026
diff --git a/.github/workflows/api-docs.yml b/.github/workflows/api-docs.yml
@@ -27,7 +27,7 @@ jobs:
       contents: read
     runs-on: ubuntu-latest
     steps:
-      - uses: sap/cloud-sdk-js/.github/actions/setup@main
+      - uses: $/.github/actions/setup
 
       - name: Generate API documentation
         run: |

diff --git a/.github/workflows/auto-lint.yml b/.github/workflows/auto-lint.yml
@@ -20,7 +20,7 @@ jobs:
           owner: SAP
           repositories: cloud-sdk-js
           permission-contents: write
-      - uses: sap/cloud-sdk-js/.github/actions/setup@main
+      - uses: $/.github/actions/setup
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           token: ${{ steps.app-token.outputs.token }}

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -38,7 +38,7 @@ jobs:
       matrix:
         node-version: [26, 24, 22]
     steps:
-      - uses: sap/cloud-sdk-js/.github/actions/setup@main
+      - uses: $/.github/actions/setup
         with:
           node-version: ${{ matrix.node-version }}
       - run: pnpm run generate
@@ -68,7 +68,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: sap/cloud-sdk-js/.github/actions/setup@main
+      - uses: $/.github/actions/setup
       - name: Test Service Version Check
         run: pnpm run check:test-service
       - parallel:
@@ -79,7 +79,7 @@ jobs:
           - name: Undeclared dependency Check
             run: pnpm run check:dependencies --reporter=github-actions
           - name: Check public api
-            uses: ./.github/actions/check-public-api
+            uses: $/.github/actions/check-public-api
             with:
               force_internal_exports: 'true'
               excluded_packages: 'eslint-config, util, test-util'
@@ -90,7 +90,7 @@ jobs:
           - name: API Doc Check
             run: pnpm run doc
           - name: License Check
-            uses: ./.github/actions/check-license
+            uses: $/.github/actions/check-license
       - name: Slack Notify
         if: ${{ github.event_name != 'pull_request' && (failure() || cancelled()) }}
         env:
@@ -110,7 +110,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: sap/cloud-sdk-js/.github/actions/setup@main
+      - uses: $/.github/actions/setup
       - run: pnpm run test:e2e
 
   canary-release-pre-check:
@@ -125,7 +125,7 @@ jobs:
       REF_NAME: ${{ github.ref_name }}
       REF: ${{ github.ref }}
     steps:
-      - uses: sap/cloud-sdk-js/.github/actions/setup@main
+      - uses: $/.github/actions/setup
       - name: Check if latest commit is within 24 hrs
         id: date-check
         run: |
@@ -153,7 +153,7 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: sap/cloud-sdk-js/.github/actions/setup@main
+      - uses: $/.github/actions/setup
         with:
           persist-credentials: true
           package-manager-cache: false
@@ -186,10 +186,10 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: sap/cloud-sdk-js/.github/actions/setup@main
+      - uses: $/.github/actions/setup
       - name: Get Changelog
         id: get-changelog
-        uses: ./.github/actions/get-changelog
+        uses: $/.github/actions/get-changelog
       - name: Create Release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

diff --git a/.github/workflows/bump.yml b/.github/workflows/bump.yml
@@ -25,15 +25,15 @@ jobs:
           owner: SAP
           repositories: cloud-sdk-js
           permission-contents: write
-      - uses: sap/cloud-sdk-js/.github/actions/setup@main
+      - uses: $/.github/actions/setup
         with:
           token: ${{ steps.app-token.outputs.token }}
           ref: 'main'
           persist-credentials: true
 
       - name: bump version
         id: bump
-        uses: ./.github/actions/changesets-fixed-version-bump
+        uses: $/.github/actions/changesets-fixed-version-bump
         with:
           majorVersion: ${{ inputs.majorVersion }}
 
@@ -47,10 +47,10 @@ jobs:
         id: merge-changelogs
         env:
           VERSION: ${{ steps.bump.outputs.version }}
-        uses: ./.github/actions/merge-and-write-changelogs
+        uses: $/.github/actions/merge-and-write-changelogs
 
       - name: commit and tag
-        uses: ./.github/actions/commit-and-tag
+        uses: $/.github/actions/commit-and-tag
         with:
           version: ${{ steps.bump.outputs.version }}
           user-email: ${{ vars.SAP_CLOUD_SDK_BOT_EMAIL }}
@@ -61,7 +61,7 @@ jobs:
     needs: [bump]
     permissions:
       contents: read
-    uses: ./.github/workflows/api-docs.yml
+    uses: $/.github/workflows/api-docs.yml
     secrets:
       SAP_CLOUD_SDK_BOT_CLIENT_ID: ${{ secrets.SAP_CLOUD_SDK_BOT_CLIENT_ID }}
       SAP_CLOUD_SDK_BOT_PRIVATE_KEY: ${{ secrets.SAP_CLOUD_SDK_BOT_PRIVATE_KEY }}

diff --git a/.github/workflows/check-pr.yml b/.github/workflows/check-pr.yml
@@ -28,6 +28,6 @@ jobs:
             .github/actions/check-pr
             .github/PULL_REQUEST_TEMPLATE.md
             .changeset
-      - uses: ./.github/actions/check-pr
+      - uses: $/.github/actions/check-pr
         with:
           changed-files: ${{ steps.changed-files.outputs.added_files }} ${{ steps.changed-files.outputs.modified_files }}
diff --git a/.github/workflows/downloads.yml b/.github/workflows/downloads.yml
@@ -13,6 +13,6 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: sap/cloud-sdk-js/.github/actions/setup@main
+      - uses: $/.github/actions/setup
       - name: Download Stats
         run: node scripts/npm-stats.ts
diff --git a/.github/workflows/memory-tests.yml b/.github/workflows/memory-tests.yml
@@ -13,7 +13,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: sap/cloud-sdk-js/.github/actions/setup@main
+      - uses: $/.github/actions/setup
       - name: start e2e tests server
         run: pnpm --filter @sap-cloud-sdk/e2e-tests run pretest:e2e
       - name: install test v2

diff --git a/.github/workflows/release-entry.yml b/.github/workflows/release-entry.yml
@@ -28,7 +28,7 @@ jobs:
     permissions:
       contents: read
       id-token: write
-    uses: ./.github/workflows/release.yml
+    uses: $/.github/workflows/release.yml
     secrets:
       SAP_CLOUD_SDK_BOT_CLIENT_ID: ${{ secrets.SAP_CLOUD_SDK_BOT_CLIENT_ID }}
       SAP_CLOUD_SDK_BOT_PRIVATE_KEY: ${{ secrets.SAP_CLOUD_SDK_BOT_PRIVATE_KEY }}
@@ -39,7 +39,7 @@ jobs:
       contents: write
       pull-requests: write
       id-token: write
-    uses: ./.github/workflows/build.yml
+    uses: $/.github/workflows/build.yml
     secrets:
       SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
     with:

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -26,7 +26,7 @@ jobs:
           repositories: cloud-sdk
           permission-contents: write
           permission-pull-requests: write
-      - uses: sap/cloud-sdk-js/.github/actions/setup@main
+      - uses: $/.github/actions/setup
         with:
           ref: 'main'
           persist-credentials: true

diff --git a/.github/workflows/tests-windows.yml b/.github/workflows/tests-windows.yml
@@ -16,7 +16,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: sap/cloud-sdk-js/.github/actions/setup@main
+      - uses: $/.github/actions/setup
       - run: pnpm run test:unit
       - if: always()
         run: pnpm run test:integration

diff --git a/.github/workflows/typedoc.yml b/.github/workflows/typedoc.yml
@@ -16,5 +16,5 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: sap/cloud-sdk-js/.github/actions/setup@main
+      - uses: $/.github/actions/setup
       - run: pnpm run doc
diff --git a/.github/zizmor.yml b/.github/zizmor.yml
@@ -6,9 +6,3 @@ rules:
   dangerous-triggers:
     ignore:
       - auto-dependabot-fix.yml
-  # allow unpinned references to own repositories
-  unpinned-uses:
-    config:
-      policies:
-        'sap/ai-sdk-js/*': any
-        'sap/cloud-sdk-js/*': any