Skip to content

Validation only: Node and Docker Actions upgrades - #262

Closed
Hazzng wants to merge 7 commits into
mainfrom
chore/action-upgrade-proof-20261014
Closed

Hazzng wants to merge 7 commits into
mainfrom
chore/action-upgrade-proof-20261014

Conversation

@Hazzng

@Hazzng Hazzng commented Oct 14, 2026 •

Copy link
Copy Markdown
Owner

Validation only; do not merge.

This branch contains the combined #259, #260, and #261 updates plus one temporary workflow. The workflow exercises setup-node 7 with the npm registry configuration used by SDK release installs, both frozen installs, SDK checks, Buildx 4, GHCR login 4, Docker metadata 6, and build-push 7. It builds and loads a local image, then verifies Node and the compiled server/migration files. Package permissions are read-only and push is false. The workflow will not enter main; this PR will be closed after proof is collected.


Summary by cubic

Validation-only branch; do not merge.

Combines the setup-node 4→7, docker/metadata-action 5→6, and docker/build-push-action 6→7 upgrades across the CI, release, security, and TypeScript SDK workflows, and adds one temporary workflow to prove the upgrades work together before they land in main. The validation workflow runs setup-node 7 with the npm registry config used by SDK releases, frozen installs, and TypeScript checks, then builds and loads a local image with Buildx 4, GHCR login 4, metadata 6, and build-push 7, verifying Node and the compiled server and migration files. Permissions are read-only and push is false. The temporary workflow will not enter main; this PR will be closed once proof is collected.

Written for commit ba0e60e. Summary will update on new commits.

View guided diff Turn on auto-fix

dependabot Bot and others added 7 commits October 14, 2026 01:49
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 7.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v7)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5 to 6.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](docker/metadata-action@v5...v6)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6 to 7.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@v6...v7)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@coderabbitai

coderabbitai Bot commented Oct 14, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: b747ac76-70dd-43c3-a454-f9ff3b1d7a08

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@Hazzng Hazzng closed this Oct 14, 2026
@Hazzng
Hazzng deleted the chore/action-upgrade-proof-20261014 branch October 14, 2026 02:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant