tkmind/tkmind_go
1
0
Fork 0
Code Issues Pull Requests Actions 4 Packages Projects Releases Wiki Activity

Upgrade GitHub Actions to latest versions (#6700)

Browse Source 
Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com>
This commit is contained in:
Salman Chishti
2026-01-26 22:39:26 +00:00
committed by GitHub
parent 214f7a2735
commit 57fbffa7ad
25 changed files with 36 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/build-cli.yml
+2 -2
View File
@@ -80,13 +80,13 @@ jobs:
- name: Cache Cargo artifacts (Linux/macOS) - name: Cache Cargo artifacts (Linux/macOS)
if: matrix.use-cross if: matrix.use-cross
uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2 uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
with: with:
key: ${{ matrix.architecture }}-${{ matrix.target-suffix }} key: ${{ matrix.architecture }}-${{ matrix.target-suffix }}
- name: Cache Cargo artifacts (Windows) - name: Cache Cargo artifacts (Windows)
if: matrix.use-docker if: matrix.use-docker
uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2 uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
with: with:
key: ${{ matrix.architecture }}-${{ matrix.target-suffix }} key: ${{ matrix.architecture }}-${{ matrix.target-suffix }}
.github/workflows/bundle-desktop-intel.yml
+2 -2
View File
@@ -64,7 +64,7 @@ jobs:
npm version ${{ inputs.version }} --no-git-tag-version --allow-same-version npm version ${{ inputs.version }} --no-git-tag-version --allow-same-version
- name: Cache Rust dependencies - name: Cache Rust dependencies
uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2 uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
with: with:
key: intel key: intel
@@ -139,7 +139,7 @@ jobs:
- name: Configure AWS credentials - name: Configure AWS credentials
if: ${{ inputs.signing }} if: ${{ inputs.signing }}
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4 uses: aws-actions/configure-aws-credentials@61815dcd50bd041e203e49132bacad1fd04d2708 # v5.1.1
with: with:
role-to-assume: "${{ secrets.OSX_CODESIGN_ROLE }}" role-to-assume: "${{ secrets.OSX_CODESIGN_ROLE }}"
aws-region: us-west-2 aws-region: us-west-2
.github/workflows/bundle-desktop-linux.yml
+1 -1
View File
@@ -95,7 +95,7 @@ jobs:
run: source ./bin/activate-hermit && cargo install cross --git https://github.com/cross-rs/cross run: source ./bin/activate-hermit && cargo install cross --git https://github.com/cross-rs/cross
- name: Cache Rust dependencies - name: Cache Rust dependencies
uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2 uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
with: with:
key: linux key: linux
.github/workflows/bundle-desktop-windows.yml
+1 -1
View File
@@ -49,7 +49,7 @@ jobs:
- name: Configure AWS credentials - name: Configure AWS credentials
if: inputs.signing && inputs.signing == true if: inputs.signing && inputs.signing == true
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # ratchet:aws-actions/configure-aws-credentials@v4 uses: aws-actions/configure-aws-credentials@61815dcd50bd041e203e49132bacad1fd04d2708 # v5.1.1
with: with:
role-to-assume: ${{ github.ref == 'refs/heads/main' && secrets.WINDOW_SIGNING_ROLE || secrets.WINDOW_SIGNING_ROLE_TAG }} role-to-assume: ${{ github.ref == 'refs/heads/main' && secrets.WINDOW_SIGNING_ROLE || secrets.WINDOW_SIGNING_ROLE_TAG }}
aws-region: us-west-2 aws-region: us-west-2
.github/workflows/bundle-desktop.yml
+1 -1
View File
@@ -169,7 +169,7 @@ jobs:
- name: Configure AWS credentials - name: Configure AWS credentials
if: ${{ inputs.signing }} if: ${{ inputs.signing }}
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4 uses: aws-actions/configure-aws-credentials@61815dcd50bd041e203e49132bacad1fd04d2708 # v5.1.1
with: with:
role-to-assume: "${{ secrets.OSX_CODESIGN_ROLE }}" role-to-assume: "${{ secrets.OSX_CODESIGN_ROLE }}"
aws-region: us-west-2 aws-region: us-west-2
.github/workflows/canary.yml
+1 -1
View File
@@ -109,7 +109,7 @@ jobs:
# Create/update the canary release # Create/update the canary release
- name: Release canary - name: Release canary
uses: ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174 # pin@v1 uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # v1.20.0
with: with:
tag: canary tag: canary
name: Canary name: Canary
.github/workflows/create-release-pr.yaml
+1 -1
View File
@@ -44,7 +44,7 @@ jobs:
fetch-depth: 0 # to generate complete release log fetch-depth: 0 # to generate complete release log
- uses: cashapp/activate-hermit@e49f5cb4dd64ff0b0b659d1d8df499595451155a # v1 - uses: cashapp/activate-hermit@e49f5cb4dd64ff0b0b659d1d8df499595451155a # v1
- uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6 - uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
- name: Validate input and set old version - name: Validate input and set old version
run: | run: |
.github/workflows/deploy-docs-and-extensions.yml
+1 -1
View File
@@ -74,7 +74,7 @@ jobs:
- name: Deploy to /gh-pages - name: Deploy to /gh-pages
if: github.event_name == 'push' && github.ref == 'refs/heads/main' if: github.event_name == 'push' && github.ref == 'refs/heads/main'
uses: peaceiris/actions-gh-pages@373f7f263a76c20808c831209c920827a82a2847 # pin@v3 uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4.0.0
with: with:
github_token: ${{ secrets.GITHUB_TOKEN }} github_token: ${{ secrets.GITHUB_TOKEN }}
publish_dir: documentation/build publish_dir: documentation/build
.github/workflows/docs-update-recipe-ref.yml
+1 -1
View File
@@ -191,7 +191,7 @@ jobs:
if: | if: |
steps.extract.outputs.has_changes == 'true' && steps.extract.outputs.has_changes == 'true' &&
(github.event.inputs.dry_run != 'true' || github.event_name == 'release') (github.event.inputs.dry_run != 'true' || github.event_name == 'release')
uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6 uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
with: with:
branch: docs/auto-recipe-reference-${{ steps.versions.outputs.new_version }} branch: docs/auto-recipe-reference-${{ steps.versions.outputs.new_version }}
delete-branch: true delete-branch: true
.github/workflows/goose-issue-solver.yml
+1 -1
View File
@@ -219,7 +219,7 @@ jobs:
- name: Create Pull Request - name: Create Pull Request
if: steps.goose.outputs.has_changes == 'true' if: steps.goose.outputs.has_changes == 'true'
uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # pin@v7.0.8 uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
with: with:
token: ${{ secrets.GITHUB_TOKEN }} token: ${{ secrets.GITHUB_TOKEN }}
commit-message: "fix: ${{ steps.issue.outputs.title }}" commit-message: "fix: ${{ steps.issue.outputs.title }}"
.github/workflows/nightly.yml
+1 -1
View File
@@ -111,7 +111,7 @@ jobs:
# Create/update the nightly release # Create/update the nightly release
- name: Release nightly - name: Release nightly
uses: ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174 # pin@v1 uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # v1.20.0
with: with:
tag: ${{ needs.prepare-version.outputs.version }} tag: ${{ needs.prepare-version.outputs.version }}
name: "Nightly ${{ needs.prepare-version.outputs.version }}" name: "Nightly ${{ needs.prepare-version.outputs.version }}"
.github/workflows/pr-comment-build-cli.yml
+2 -2
View File
@@ -33,7 +33,7 @@ jobs:
head_sha: ${{ steps.set_head_sha.outputs.head_sha || github.sha }} head_sha: ${{ steps.set_head_sha.outputs.head_sha || github.sha }}
steps: steps:
- name: Run command action - name: Run command action
uses: github/command@v1.3.0 uses: github/command@v2.0.3
id: command id: command
with: with:
command: ".build-cli" command: ".build-cli"
@@ -78,7 +78,7 @@ jobs:
merge-multiple: true merge-multiple: true
- name: Comment on PR with CLI download links - name: Comment on PR with CLI download links
uses: peter-evans/create-or-update-comment@v4 uses: peter-evans/create-or-update-comment@v5
with: with:
issue-number: ${{ needs.trigger-on-command.outputs.pr_number }} issue-number: ${{ needs.trigger-on-command.outputs.pr_number }}
body: | body: |
.github/workflows/pr-comment-bundle-intel.yml
+2 -2
View File
@@ -36,7 +36,7 @@ jobs:
head_sha: ${{ steps.set_head_sha.outputs.head_sha || github.sha }} head_sha: ${{ steps.set_head_sha.outputs.head_sha || github.sha }}
steps: steps:
- name: Run command action - name: Run command action
uses: github/command@319d5236cc34ed2cb72a47c058a363db0b628ebe # pin@v1.3.0 uses: github/command@3442f3fa1efe01bdb024b157083c337902d17372 # v2.0.3
id: command id: command
with: with:
command: ".bundle-intel" command: ".bundle-intel"
@@ -85,7 +85,7 @@ jobs:
path: intel-dist path: intel-dist
- name: Comment on PR with Intel download link - name: Comment on PR with Intel download link
uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # pin@v4 uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
with: with:
issue-number: ${{ needs.trigger-on-command.outputs.pr_number }} issue-number: ${{ needs.trigger-on-command.outputs.pr_number }}
body: | body: |
.github/workflows/pr-comment-bundle-windows.yml
+2 -2
View File
@@ -39,7 +39,7 @@ jobs:
head_sha: ${{ steps.set_head_sha.outputs.head_sha || github.sha }} head_sha: ${{ steps.set_head_sha.outputs.head_sha || github.sha }}
steps: steps:
- name: Run command action - name: Run command action
uses: github/command@319d5236cc34ed2cb72a47c058a363db0b628ebe # pin@v1.3.0 uses: github/command@3442f3fa1efe01bdb024b157083c337902d17372 # v2.0.3
id: command id: command
with: with:
command: ".bundle-windows" command: ".bundle-windows"
@@ -86,7 +86,7 @@ jobs:
path: windows-dist path: windows-dist
- name: Comment on PR with Windows download link - name: Comment on PR with Windows download link
uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # pin@v4 uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
with: with:
issue-number: ${{ needs.trigger-on-command.outputs.pr_number }} issue-number: ${{ needs.trigger-on-command.outputs.pr_number }}
body: | body: |
.github/workflows/pr-comment-bundle.yml
+2 -2
View File
@@ -50,7 +50,7 @@ jobs:
echo "Repository: ${REPOSITORY}" echo "Repository: ${REPOSITORY}"
- name: Run command action - name: Run command action
uses: github/command@319d5236cc34ed2cb72a47c058a363db0b628ebe # pin@v1.3.0 uses: github/command@3442f3fa1efe01bdb024b157083c337902d17372 # v2.0.3
id: command id: command
with: with:
command: ".bundle" command: ".bundle"
@@ -127,7 +127,7 @@ jobs:
path: arm64-dist path: arm64-dist
- name: Comment on PR with ARM64 download link - name: Comment on PR with ARM64 download link
uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # pin@v4 uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
with: with:
issue-number: ${{ needs.trigger-on-command.outputs.pr_number }} issue-number: ${{ needs.trigger-on-command.outputs.pr_number }}
body: | body: |
.github/workflows/pr-smoke-test.yml
+1 -1
View File
@@ -149,7 +149,7 @@ jobs:
python-version: '3.12' python-version: '3.12'
- name: Install uv (for error proxy) - name: Install uv (for error proxy)
uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # pin@v6 uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
- name: Run Compaction Tests - name: Run Compaction Tests
env: env:
.github/workflows/pr-website-preview.yml
+2 -2
View File
@@ -40,7 +40,7 @@ jobs:
npm run build npm run build
- name: Deploy preview - name: Deploy preview
uses: rossjrw/pr-preview-action@8ff09e486b4c23709012eedd3b42e9f0b95dd0c5 # v1 uses: rossjrw/pr-preview-action@ffa7509e91a3ec8dfc2e5536c4d5c1acdf7a6de9 # v1.8.1
if: ${{ github.event.pull_request.head.repo.full_name == 'block/goose' }} if: ${{ github.event.pull_request.head.repo.full_name == 'block/goose' }}
with: with:
source-dir: documentation/build source-dir: documentation/build
@@ -56,7 +56,7 @@ jobs:
with: with:
fetch-depth: 0 fetch-depth: 0
- uses: astral-sh/setup-uv@38f3f104447c67c051c4a08e39b64a148898af3a # v4 - uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
- name: Clean up gh-pages branch - name: Clean up gh-pages branch
run: | run: |
.github/workflows/publish-docker.yml
+3 -3
View File
@@ -24,10 +24,10 @@ jobs:
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # pin@v4 uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # pin@v4
- name: Set up Docker Buildx - name: Set up Docker Buildx
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # pin@v3.11.1 uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
- name: Log in to GitHub Container Registry - name: Log in to GitHub Container Registry
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # pin@v3.5.0 uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
with: with:
registry: ghcr.io registry: ghcr.io
username: ${{ github.actor }} username: ${{ github.actor }}
@@ -35,7 +35,7 @@ jobs:
- name: Extract metadata - name: Extract metadata
id: meta id: meta
uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # pin@v5.8.0 uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
with: with:
images: ghcr.io/${{ github.repository_owner }}/goose images: ghcr.io/${{ github.repository_owner }}/goose
tags: | tags: |
.github/workflows/recipe-security-scanner.yml
+2 -2
View File
@@ -21,7 +21,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Harden Runner - name: Harden Runner
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1 uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
with: with:
egress-policy: audit egress-policy: audit
@@ -103,7 +103,7 @@ jobs:
- name: Set up Docker Buildx - name: Set up Docker Buildx
if: steps.find_recipes.outputs.has_recipes == 'true' && steps.recipe_changes.outputs.recipe_files_changed == 'true' if: steps.find_recipes.outputs.has_recipes == 'true' && steps.recipe_changes.outputs.recipe_files_changed == 'true'
uses: docker/setup-buildx-action@1583c0f09d26c58c59d25b0eef29792b7ce99d9a uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
- name: Prune Docker caches - name: Prune Docker caches
if: steps.find_recipes.outputs.has_recipes == 'true' && steps.recipe_changes.outputs.recipe_files_changed == 'true' if: steps.find_recipes.outputs.has_recipes == 'true' && steps.recipe_changes.outputs.recipe_files_changed == 'true'
.github/workflows/release-branches.yml
+1 -1
View File
@@ -18,7 +18,7 @@ jobs:
pull-requests: write pull-requests: write
steps: steps:
- name: Comment with download link - name: Comment with download link
uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # pin@v4 uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
with: with:
issue-number: ${{ github.event.number }} issue-number: ${{ github.event.number }}
body: | body: |
.github/workflows/release.yml
+2 -2
View File
@@ -100,7 +100,7 @@ jobs:
# Create/update the versioned release # Create/update the versioned release
- name: Release versioned - name: Release versioned
uses: ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174 # pin@v1 uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # v1.20.0
with: with:
token: ${{ secrets.GITHUB_TOKEN }} token: ${{ secrets.GITHUB_TOKEN }}
artifacts: | artifacts: |
@@ -117,7 +117,7 @@ jobs:
# Create/update the stable release # Create/update the stable release
- name: Release stable - name: Release stable
uses: ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174 # pin@v1 uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # v1.20.0
with: with:
tag: stable tag: stable
name: Stable name: Stable
.github/workflows/scorecard.yml
+1 -1
View File
@@ -73,6 +73,6 @@ jobs:
# Upload the results to GitHub's code scanning dashboard (optional). # Upload the results to GitHub's code scanning dashboard (optional).
# Commenting out will disable upload of results to your repo's Code Scanning dashboard # Commenting out will disable upload of results to your repo's Code Scanning dashboard
- name: "Upload to code-scanning" - name: "Upload to code-scanning"
uses: github/codeql-action/upload-sarif@v3 uses: github/codeql-action/upload-sarif@v4
with: with:
sarif_file: results.sarif sarif_file: results.sarif
.github/workflows/test-finder.yml
+1 -1
View File
@@ -153,7 +153,7 @@ jobs:
- name: Create Pull Request - name: Create Pull Request
if: steps.find_untested.outputs.patch_created == 'true' && github.event.inputs.dry_run != 'true' if: steps.find_untested.outputs.patch_created == 'true' && github.event.inputs.dry_run != 'true'
uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # pin@v7.0.8 uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
with: with:
token: ${{ secrets.GITHUB_TOKEN }} token: ${{ secrets.GITHUB_TOKEN }}
commit-message: "test: add test for ${{ steps.find_untested.outputs.function_name }}" commit-message: "test: add test for ${{ steps.find_untested.outputs.function_name }}"
.github/workflows/update-health-dashboard.yml
+1 -1
View File
@@ -26,7 +26,7 @@ jobs:
steps: steps:
- name: 'Download previous metrics' - name: 'Download previous metrics'
uses: dawidd6/action-download-artifact@688efa90a08f3552e7c1420c8313e215164e8b14 uses: dawidd6/action-download-artifact@0bd50d53a6d7fb5cb921e607957e9cc12b4ce392 # v12
with: with:
name: health-metrics name: health-metrics
path: . path: .
.github/workflows/update-release-pr.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ jobs:
path: './prior-version' path: './prior-version'
- uses: cashapp/activate-hermit@e49f5cb4dd64ff0b0b659d1d8df499595451155a # v1 - uses: cashapp/activate-hermit@e49f5cb4dd64ff0b0b659d1d8df499595451155a # v1
- uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6 - uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
- name: Extract version from branch name - name: Extract version from branch name
env: env: