From 6b0789c8335ec8b6e6751fa1ebc23a3669d00c7e Mon Sep 17 00:00:00 2001 From: JeanExtreme002 Date: Fri, 9 Oct 2026 16:14:42 -0300 Subject: [PATCH] ci: move every pinned action to a Node 24 release The runners now warn that actions/checkout, actions/setup-node and nick-fields/retry target the deprecated Node 20 runtime and are being forced onto Node 24. Every pinned action moves to its newest release, each of which runs on Node 24 natively. setup-node v7 dropped the dummy NODE_AUTH_TOKEN fallback; the publish job authenticates through OIDC and never set one, so the only change there is turning off the automatic npm cache, as the trusted publishing docs recommend. github-script v9 stops supporting require of @actions/github inside scripts; neither script here does that. --- .github/workflows/delete-pr-branch.yml | 2 +- .github/workflows/deploy-docs.yml | 8 ++++---- .github/workflows/go-package.yml | 6 +++--- .github/workflows/labeler.yml | 2 +- .github/workflows/lint-pr-title.yml | 2 +- .github/workflows/node-package.yml | 6 +++--- .github/workflows/publish.yml | 13 +++++++------ .github/workflows/python-package.yml | 6 +++--- 8 files changed, 23 insertions(+), 22 deletions(-) diff --git a/.github/workflows/delete-pr-branch.yml b/.github/workflows/delete-pr-branch.yml index f0d91d5..e8cd51a 100644 --- a/.github/workflows/delete-pr-branch.yml +++ b/.github/workflows/delete-pr-branch.yml @@ -13,7 +13,7 @@ jobs: if: github.event.pull_request.head.repo.full_name == github.repository runs-on: ubuntu-latest steps: - - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7 + - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: script: | const pr = context.payload.pull_request; diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml index aa241c5..e44b23f 100644 --- a/.github/workflows/deploy-docs.yml +++ b/.github/workflows/deploy-docs.yml @@ -25,12 +25,12 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: 3.x - run: echo "cache_id=$(date --utc '+%V')" >> $GITHUB_ENV - - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 + - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: key: mkdocs-material-${{ env.cache_id }} path: .cache @@ -50,4 +50,4 @@ jobs: url: ${{ steps.deployment.outputs.page_url }} steps: - id: deployment - uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0 + uses: actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346 # v5.0.1 diff --git a/.github/workflows/go-package.yml b/.github/workflows/go-package.yml index 7fce40e..bbe65af 100644 --- a/.github/workflows/go-package.yml +++ b/.github/workflows/go-package.yml @@ -31,9 +31,9 @@ jobs: matrix: go-version: ['1.26.x', '1.27.x'] steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up Go ${{ matrix.go-version }} - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6 + uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version: ${{ matrix.go-version }} check-latest: true # the toolcache lags patch releases govulncheck expects @@ -58,7 +58,7 @@ jobs: - name: Race detector run: make test-race - name: Integration tests (live FR24) - uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3 + uses: nick-fields/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 # v4.0.0 with: timeout_minutes: 10 max_attempts: 3 diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml index eb0a7a4..3d554d4 100644 --- a/.github/workflows/labeler.yml +++ b/.github/workflows/labeler.yml @@ -13,7 +13,7 @@ jobs: name: Apply PR labels runs-on: ubuntu-latest steps: - - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7 + - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: script: | const pr = context.payload.pull_request; diff --git a/.github/workflows/lint-pr-title.yml b/.github/workflows/lint-pr-title.yml index bef0cee..339faa3 100644 --- a/.github/workflows/lint-pr-title.yml +++ b/.github/workflows/lint-pr-title.yml @@ -21,7 +21,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Lint PR title - uses: amannn/action-semantic-pull-request@e32d7e603df1aa1ba07e981f2a23455dee596825 # v5 + uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6.1.1 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: diff --git a/.github/workflows/node-package.yml b/.github/workflows/node-package.yml index c53c804..5c8d37d 100644 --- a/.github/workflows/node-package.yml +++ b/.github/workflows/node-package.yml @@ -27,9 +27,9 @@ jobs: matrix: node-version: ['18.x', '20.x', '22.x'] steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up NodeJS ${{ matrix.node-version }} - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: ${{ matrix.node-version }} - name: Install dependencies @@ -41,7 +41,7 @@ jobs: - name: Offline tests (PR gate) run: npm run test:offline - name: Integration tests (live FR24) - uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3 + uses: nick-fields/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 # v4.0.0 with: timeout_minutes: 10 max_attempts: 3 diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index f866162..82dfb7c 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -28,7 +28,7 @@ jobs: # Read by tag-go-module when there is no release tag to take it from. go: ${{ steps.versions.outputs.go }} steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Read declared versions id: versions @@ -75,7 +75,7 @@ jobs: permissions: contents: write # Required to push the module tag steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 @@ -169,10 +169,10 @@ jobs: permissions: id-token: write # Required for trusted publishing (OIDC) steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up Python - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.13' @@ -207,13 +207,14 @@ jobs: run: working-directory: ./nodejs steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up NodeJS - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '22.x' registry-url: 'https://registry.npmjs.org' + package-manager-cache: false - name: Upgrade npm # npm trusted publishing (OIDC) requires npm >= 11.5.1. diff --git a/.github/workflows/python-package.yml b/.github/workflows/python-package.yml index 2ac44a1..001787d 100644 --- a/.github/workflows/python-package.yml +++ b/.github/workflows/python-package.yml @@ -23,9 +23,9 @@ jobs: matrix: python-version: ['3.10', '3.11', '3.12', '3.13'] steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ matrix.python-version }} - name: Install dependencies @@ -40,7 +40,7 @@ jobs: - name: Offline tests (PR gate) run: cd python && pytest -m "not integration" --cov=FlightRadarAPI --cov-report=term --cov-report=xml -v - name: Integration tests (live FR24) - uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3 + uses: nick-fields/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 # v4.0.0 with: timeout_minutes: 10 max_attempts: 3