Skip to content

chore: bump the actions group across 1 directory with 5 updates #18

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jan-kubica merged 1 commit into from
May 15, 2026
Merged

chore: bump the actions group across 1 directory with 5 updates #18

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/audit-branch-protection.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ jobs:

- name: Create GitHub App token
id: app-token
uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v2
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v2
with:
app-id: ${{ secrets.BRANCH_PROTECTION_APP_ID }}
private-key: ${{ secrets.BRANCH_PROTECTION_APP_KEY }}
Expand Down Expand Up @@ -175,7 +175,7 @@ jobs:
echo "::endgroup::"

- name: Upload evidence
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
# Include the ruleset slug so parallel callers (one job per
# expected ruleset) don't collide on a shared run_id.
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/cla.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ jobs:
steps:
- name: Generate GitHub App token
id: app-token
uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v2
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v2
with:
app-id: ${{ inputs.app-id }}
private-key: ${{ secrets.CLA_APP_PRIVATE_KEY }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/pr-lint.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ jobs:
custom_labels: '{"feat": "enhancement", "fix": "bug", "refactor": "enhancement"}'

- name: copy-issue-labels
uses: michalvankodev/copy-issue-labels@f54e957e58fc976eba5ffa36e1a1030572dbb78d # 2023-09-12
uses: michalvankodev/copy-issue-labels@c4df96ee53d2cdf639ba169a26c43b04d5085cb3 # 2023-09-12
with:
repo-token: ${{ secrets.GITHUB_TOKEN }}

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/provenance-update.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -107,7 +107,7 @@ jobs:
token: ${{ secrets.auth_token || steps.app-token.outputs.token || github.token }}

- name: Setup Node.js
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
with:
node-version: ${{ inputs.node-version }}

Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/rust-napi-ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -65,7 +65,7 @@ jobs:
contents: read
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
with:
node-version: ${{ inputs.node-version }}
- run: node scripts/version-sync.mjs check
Expand Down Expand Up @@ -104,7 +104,7 @@ jobs:
runtime: node
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
with:
node-version: ${{ inputs.node-version }}
- uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8
Expand Down Expand Up @@ -195,7 +195,7 @@ jobs:
- if: inputs.build-changed == 'true'
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- if: inputs.build-changed == 'true'
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
with:
node-version: ${{ inputs.node-version }}
- if: inputs.build-changed == 'true'
Expand Down Expand Up @@ -262,7 +262,7 @@ jobs:
- if: inputs.build-changed == 'true'
run: bun install --frozen-lockfile
- if: inputs.build-changed == 'true'
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
Copy link
Copy Markdown

@devin-ai-integration devin-ai-integration Bot Apr 25, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚩 download-artifact major version bump (v7 → v8) paired with upload-artifact v7

The download-artifact action was bumped from v7.0.0 to v8.0.1 at .github/workflows/rust-napi-ci.yml:265, while upload-artifact remains at v7.0.1 at .github/workflows/rust-napi-ci.yml:231. Both are in the v4+ generation sharing the same underlying artifact backend, so artifact format compatibility is maintained. The download step uses no name parameter (downloading all artifacts into subdirectories under path: artifacts), and the subsequent "Move artifacts" step at line 271-281 iterates over artifacts/bindings-* — this pattern has been stable since v4. However, since this is a major version bump, it's worth verifying the v8 release notes for any changes to default behavior (e.g., new required inputs, changed defaults for merge-multiple, or filtering behavior) that could silently affect which artifacts are downloaded.

Open in Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

with:
path: artifacts
- name: Move artifacts
Expand Down