Your Build Pipeline Is the New Perimeter, and It Just Learned to Replicate Itself

There's an assumption baked into almost every CI/CD pipeline on the planet: that a version tag means what it says. tj-actions/changed-files@v35 should always point to the same code it pointed to yesterday. That assumption held for years…