From 1fdae3d0c75c6bac8d55cdd5919335781b825876 Mon Sep 17 00:00:00 2001 From: Patrick Carney Date: Mon, 17 Aug 2026 12:54:57 -0400 Subject: [PATCH] Bump actions to current majors; add Dependabot Silences the runners' Node 20 deprecation warnings (checkout v7, setup-node v7, setup-python v7, upload-artifact v7, download-artifact v8, cache v6, setup-uv v10) and adds weekly Dependabot for the github-actions ecosystem so future pin bumps arrive as PRs. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01U99AjT4THeqirpRGFRygTM --- .github/dependabot.yaml | 6 ++++ .github/workflows/ci-python.yaml | 12 +++---- .github/workflows/ci.yaml | 6 ++-- .github/workflows/integration-tests.yaml | 16 +++++----- .github/workflows/release-python.yml | 6 ++-- .github/workflows/release.yml | 40 ++++++++++++------------ .github/workflows/test-windows.yml | 4 +-- 7 files changed, 48 insertions(+), 42 deletions(-) create mode 100644 .github/dependabot.yaml diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml new file mode 100644 index 00000000..ca79ca5b --- /dev/null +++ b/.github/dependabot.yaml @@ -0,0 +1,6 @@ +version: 2 +updates: + - package-ecosystem: github-actions + directory: / + schedule: + interval: weekly diff --git a/.github/workflows/ci-python.yaml b/.github/workflows/ci-python.yaml index dcf3f040..ca04534f 100644 --- a/.github/workflows/ci-python.yaml +++ b/.github/workflows/ci-python.yaml @@ -24,15 +24,15 @@ jobs: check: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@v10 with: enable-cache: true - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v7 with: python-version: "3.10" @@ -58,15 +58,15 @@ jobs: matrix: python-version: [ "3.10", "3.11", "3.12", "3.13" ] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@v10 with: enable-cache: true - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v5 + uses: actions/setup-python@v7 with: python-version: ${{ matrix.python-version }} diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 717770eb..bad9146d 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -26,7 +26,7 @@ jobs: fmt: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: dtolnay/rust-toolchain@stable with: components: rustfmt @@ -36,7 +36,7 @@ jobs: # clippy: # runs-on: ubuntu-latest # steps: - # - uses: actions/checkout@v4 + # - uses: actions/checkout@v7 # - uses: dtolnay/rust-toolchain@stable # with: # components: clippy @@ -61,7 +61,7 @@ jobs: # TODO macos-latest windows-latest runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 # Install build essentials BEFORE freeing disk space to avoid removal - name: Install build dependencies (Ubuntu) diff --git a/.github/workflows/integration-tests.yaml b/.github/workflows/integration-tests.yaml index 22b6ec4e..779afecc 100644 --- a/.github/workflows/integration-tests.yaml +++ b/.github/workflows/integration-tests.yaml @@ -31,7 +31,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install build dependencies run: | @@ -48,7 +48,7 @@ jobs: run: cargo build --release --bin pctx - name: Upload pctx binary - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: pctx-binary path: target/release/pctx @@ -59,10 +59,10 @@ jobs: needs: build runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Download pctx binary - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: pctx-binary path: target/release @@ -94,10 +94,10 @@ jobs: needs: [build, cli-tests] runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Download pctx binary - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: pctx-binary path: target/release @@ -106,13 +106,13 @@ jobs: run: chmod +x target/release/pctx # Set up Python - - uses: actions/setup-python@v4 + - uses: actions/setup-python@v7 with: python-version: "3.10" # Install uv - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@v10 with: enable-cache: true diff --git a/.github/workflows/release-python.yml b/.github/workflows/release-python.yml index 48a1ed90..f4559a77 100644 --- a/.github/workflows/release-python.yml +++ b/.github/workflows/release-python.yml @@ -12,15 +12,15 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Set up Python - uses: actions/setup-python@v4 + uses: actions/setup-python@v7 with: python-version: "3.10" - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@v10 with: enable-cache: true diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 29aebb95..f6b5cdc2 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -59,7 +59,7 @@ jobs: env: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: persist-credentials: false submodules: recursive @@ -69,7 +69,7 @@ jobs: shell: bash run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargo-dist/releases/download/v0.30.2/cargo-dist-installer.sh | sh" - name: Cache dist - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: cargo-dist-cache path: ~/.cargo/bin/dist @@ -85,7 +85,7 @@ jobs: cat plan-dist-manifest.json echo "manifest=$(jq -c "." plan-dist-manifest.json)" >> "$GITHUB_OUTPUT" - name: "Upload dist-manifest.json" - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: artifacts-plan-dist-manifest path: plan-dist-manifest.json @@ -123,7 +123,7 @@ jobs: - name: enable windows longpaths run: | git config --global core.longpaths true - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: persist-credentials: false submodules: recursive @@ -138,7 +138,7 @@ jobs: run: ${{ matrix.install_dist.run }} # Get the dist-manifest - name: Fetch local artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: pattern: artifacts-* path: target/distrib/ @@ -177,7 +177,7 @@ jobs: cp dist-manifest.json "$BUILD_MANIFEST_NAME" - name: "Upload artifacts" - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: artifacts-build-local-${{ join(matrix.targets, '_') }} path: | @@ -194,19 +194,19 @@ jobs: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} BUILD_MANIFEST_NAME: target/distrib/global-dist-manifest.json steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: persist-credentials: false submodules: recursive - name: Install cached dist - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: cargo-dist-cache path: ~/.cargo/bin/ - run: chmod +x ~/.cargo/bin/dist # Get all the local artifacts for the global tasks to use (for e.g. checksums) - name: Fetch local artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: pattern: artifacts-* path: target/distrib/ @@ -224,7 +224,7 @@ jobs: cp dist-manifest.json "$BUILD_MANIFEST_NAME" - name: "Upload artifacts" - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: artifacts-build-global path: | @@ -244,19 +244,19 @@ jobs: outputs: val: ${{ steps.host.outputs.manifest }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: persist-credentials: false submodules: recursive - name: Install cached dist - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: cargo-dist-cache path: ~/.cargo/bin/ - run: chmod +x ~/.cargo/bin/dist # Fetch artifacts from scratch-storage - name: Fetch artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: pattern: artifacts-* path: target/distrib/ @@ -270,7 +270,7 @@ jobs: cat dist-manifest.json echo "manifest=$(jq -c "." dist-manifest.json)" >> "$GITHUB_OUTPUT" - name: "Upload dist-manifest.json" - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: # Overwrite the previous copy name: artifacts-dist-manifest @@ -288,14 +288,14 @@ jobs: GITHUB_EMAIL: "admin+bot@axo.dev" if: ${{ !fromJson(needs.plan.outputs.val).announcement_is_prerelease || fromJson(needs.plan.outputs.val).publish_prereleases }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: persist-credentials: true repository: "portofcontext/homebrew-tap" token: ${{ secrets.HOMEBREW_TAP_TOKEN }} # So we have access to the formula - name: Fetch homebrew formulae - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: pattern: artifacts-* path: Formula/ @@ -333,12 +333,12 @@ jobs: if: ${{ !fromJson(needs.plan.outputs.val).announcement_is_prerelease || fromJson(needs.plan.outputs.val).publish_prereleases }} steps: - name: Fetch npm packages - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: pattern: artifacts-* path: npm/ merge-multiple: true - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: '20.x' registry-url: 'https://registry.npmjs.org' @@ -365,13 +365,13 @@ jobs: env: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: persist-credentials: false submodules: recursive # Create a GitHub Release while uploading all files to it - name: "Download GitHub Artifacts" - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: pattern: artifacts-* path: artifacts diff --git a/.github/workflows/test-windows.yml b/.github/workflows/test-windows.yml index 853e21d5..0e259400 100644 --- a/.github/workflows/test-windows.yml +++ b/.github/workflows/test-windows.yml @@ -15,7 +15,7 @@ jobs: git config --global core.longpaths true - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: submodules: recursive @@ -29,7 +29,7 @@ jobs: shell: pwsh - name: Cache Rust dependencies - uses: actions/cache@v4 + uses: actions/cache@v6 with: path: | ~/.cargo/bin/