Repository navigation
Conversation
github-actions
Bot
added
size/S
mbg
marked this pull request as ready for review
October 29, 2026 16:37
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
Several workflow configurations still use macos-latest-xlarge instead of macos-26-xlarge, leaving them exposed to automatic macOS upgrades.
1 open issue
54 files not reviewed
.github/workflows/__all-platform-bundle.yml: Excluded by your content exclusion settings.github/workflows/__analysis-kinds.yml: Excluded by your content exclusion settings.github/workflows/__analyze-ref-input.yml: Excluded by your content exclusion settings.github/workflows/__autobuild-action.yml: Excluded by your content exclusion settings.github/workflows/__autobuild-direct-tracing-with-working-dir.yml: Excluded by your content exclusion settings.github/workflows/__autobuild-working-dir.yml: Excluded by your content exclusion settings.github/workflows/__build-mode-autobuild.yml: Excluded by your content exclusion settings.github/workflows/__build-mode-manual.yml: Excluded by your content exclusion settings.github/workflows/__build-mode-none.yml: Excluded by your content exclusion settings.github/workflows/__build-mode-rollback.yml: Excluded by your content exclusion settings.github/workflows/__bundle-from-nightly.yml: Excluded by your content exclusion settings.github/workflows/__bundle-from-toolcache.yml: Excluded by your content exclusion settings.github/workflows/__bundle-toolcache.yml: Excluded by your content exclusion settings.github/workflows/__cleanup-db-cluster-dir.yml: Excluded by your content exclusion settings.github/workflows/__config-export.yml: Excluded by your content exclusion settings.github/workflows/__config-input.yml: Excluded by your content exclusion settings.github/workflows/__cpp-deptrace-disabled.yml: Excluded by your content exclusion settings.github/workflows/__cpp-deptrace-enabled-on-macos.yml: Excluded by your content exclusion settings.github/workflows/__cpp-deptrace-enabled.yml: Excluded by your content exclusion settings.github/workflows/__diagnostics-export.yml: Excluded by your content exclusion settings
And 34 more.
What changed in this PR
Pins CI runner images to explicit operating-system versions, reducing unexpected environment changes in CodeQL Action checks and release automation.
Changes:
- Uses Ubuntu 26.04, macOS 26, and Windows 2025 for default runners.
- Centralizes runner defaults for generated PR checks and validation jobs.
- Updates OS-specific conditions while retaining the Ubuntu 24.04 fallback for CodeQL 2.20.7.
| File | Description |
|---|---|
pr-checks/sync.ts |
Centralizes pinned runner defaults and preserves the older-CLI fallback. |
pr-checks/checks/per-language-bundle-validation.yml |
Pins Linux per-language bundle checks. |
.github/workflows/update-release-branch.yml |
Pins release-update and backport jobs. |
.github/workflows/update-bundle.yml |
Pins bundle-update automation. |
.github/workflows/test-codeql-bundle-all.yml |
Pins the bundle test runner. |
.github/workflows/rollback-release.yml |
Pins release rollback automation. |
.github/workflows/rebuild.yml |
Pins the Action rebuild runner. |
.github/workflows/query-filters.yml |
Pins query-filter tests. |
.github/workflows/python312-windows.yml |
Pins Python 3.12 tests to Windows 2025. |
.github/workflows/prepare-release.yml |
Pins release preparation. |
.github/workflows/pr-checks.yml |
Pins the cross-platform matrix and updates OS-specific conditions. |
.github/workflows/post-release-mergeback.yml |
Pins release merge-back automation. |
.github/workflows/debug-artifacts-safe.yml |
Pins artifact checks while preserving the older-CLI fallback. |
.github/workflows/debug-artifacts-failure-safe.yml |
Pins failure-path artifact checks and preserves the fallback. |
.github/workflows/codescanning-config-cli.yml |
Pins the configuration test matrix. |
.github/workflows/codeql.yml |
Pins version-selection and analysis runners. |
Review effort: Max
| version: linked | ||
| - language: rust | ||
| os: ubuntu-latest | ||
| os: ubuntu-26.04 |
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates our workflows to avoid using the
-latestrunner labels.