Skip to content

ci(.github/workflows): update GitHub Actions to latest versions with pinned commit hashes#5525

Merged
seia-soto merged 3 commits intoghostery:masterfrom
sukvvon:ci/update-github-actions
Mar 24, 2026
Merged

ci(.github/workflows): update GitHub Actions to latest versions with pinned commit hashes#5525
seia-soto merged 3 commits intoghostery:masterfrom
sukvvon:ci/update-github-actions

Conversation

@sukvvon
Copy link
Copy Markdown
Contributor

@sukvvon sukvvon commented Mar 14, 2026

Summary

  • Pin all GitHub Actions to commit hashes for supply chain security
  • Update actions/checkout from v4 to v6.0.2
  • Update actions/setup-node from v4 to v6.3.0
  • Update actions/create-github-app-token from v1 to v3.0.0
  • Update tibdex/github-app-token from v1 to v2.1.0
  • Update peter-evans/create-pull-request from v5 to v8.1.0

@sukvvon sukvvon marked this pull request as ready for review March 14, 2026 15:07
@sukvvon sukvvon requested a review from remusao as a code owner March 14, 2026 15:07
@sukvvon
Copy link
Copy Markdown
Contributor Author

sukvvon commented Mar 14, 2026

@seia-soto 👌

@seia-soto seia-soto self-assigned this Mar 16, 2026
@seia-soto seia-soto added the PR: Internal 🏠 Changes only affect internals label Mar 16, 2026
@seia-soto
Copy link
Copy Markdown
Member

I manually reviewed the changes and fixed the below:

  • Updated pins to use commit SHA not the object ref
  • Fixed the deprecated usage due to breaking changes of used actions
  • Migrated from fully deprecated (or no longer maintained) actions to newer ones

@seia-soto seia-soto merged commit 8a366c3 into ghostery:master Mar 24, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

PR: Internal 🏠 Changes only affect internals

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants