From 9d1901b0faf4c63869c875eaf88d1baaa0fb8db6 Mon Sep 17 00:00:00 2001 From: agsaru Date: Thu, 18 Jun 2026 16:46:05 +0000 Subject: [PATCH] Updated github actions --- .github/workflows/codeql.yml | 8 +-- .github/workflows/full-stack-test.yml | 2 +- .github/workflows/metaflow.s3_tests.minio.yml | 4 +- .github/workflows/publish.yml | 8 +-- .github/workflows/test-card-build.yml | 4 +- .github/workflows/test-stubs.yml | 6 +- .github/workflows/test.yml | 8 +-- .github/workflows/ux-tests.yml | 64 +++++++++---------- 8 files changed, 52 insertions(+), 52 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index c9355f0755d..efd125625d5 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -40,11 +40,11 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v2 + uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e #v4.36.2 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -58,7 +58,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@v2 + uses: github/codeql-action/autobuild@8aad20d150bbac5944a9f9d289da16a4b0d87c1e #v4.36.2 # ℹī¸ Command-line programs to run using the OS shell. # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun @@ -71,6 +71,6 @@ jobs: # ./location_of_script_within_repo/buildscript.sh - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2 + uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e #v4.36.2 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/full-stack-test.yml b/.github/workflows/full-stack-test.yml index ae6b2c38079..6226c2fd966 100644 --- a/.github/workflows/full-stack-test.yml +++ b/.github/workflows/full-stack-test.yml @@ -20,7 +20,7 @@ jobs: steps: - name: Check out source - uses: actions/checkout@v6 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 - name: Install Metaflow run: | diff --git a/.github/workflows/metaflow.s3_tests.minio.yml b/.github/workflows/metaflow.s3_tests.minio.yml index fce442b237f..c92a1b5d6ea 100644 --- a/.github/workflows/metaflow.s3_tests.minio.yml +++ b/.github/workflows/metaflow.s3_tests.minio.yml @@ -38,12 +38,12 @@ jobs: METAFLOW_S3_TRANSIENT_RETRY_COUNT: "7" steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 with: ref: refs/pull/${{ github.event.pull_request.number }}/merge submodules: recursive - name: Set up Python - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 #v6.2.0 with: python-version: ${{ matrix.ver }} - name: Install dependencies diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 0bbfb2483d0..ae97066f53e 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -16,9 +16,9 @@ jobs: # IMPORTANT: this permission is mandatory for Trusted Publishing id-token: write steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 - name: Set up Python 3.x - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 #v6.2.0 with: python-version: '3.x' - name: Install Python 3.x dependencies @@ -36,8 +36,8 @@ jobs: run: | cd ./stubs && python3 setup.py sdist bdist_wheel --universal && cd - - name: Publish metaflow-stubs package - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e #v1.13.0 + uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b #v1.14.0 with: packages-dir: ./stubs/dist - name: Publish metaflow package - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e #v1.13.0 + uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b #v1.14.0 diff --git a/.github/workflows/test-card-build.yml b/.github/workflows/test-card-build.yml index e0a4bdab02a..bfd26302c1c 100644 --- a/.github/workflows/test-card-build.yml +++ b/.github/workflows/test-card-build.yml @@ -14,9 +14,9 @@ jobs: run: working-directory: ./metaflow/plugins/cards/ui steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 - name: Use Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #v6.4.0 with: node-version: '20.x' - name: Run npm audit diff --git a/.github/workflows/test-stubs.yml b/.github/workflows/test-stubs.yml index 9b4e37c9022..972e1a2189d 100644 --- a/.github/workflows/test-stubs.yml +++ b/.github/workflows/test-stubs.yml @@ -32,10 +32,10 @@ jobs: ver: "3.10" steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 - name: Set up Python - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 #v6.2.0 with: python-version: ${{ matrix.ver }} @@ -65,7 +65,7 @@ jobs: fi - name: Run mypy tests - uses: nick-fields/retry@v2 + uses: nick-fields/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 #v4.0.0 with: max_attempts: 2 timeout_minutes: 3 diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 8a57a47e9ec..b36db891266 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -14,9 +14,9 @@ jobs: pre-commit: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 - - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1 + - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd #v3.0.1 Python: name: core / Python ${{ matrix.ver }} on ${{ matrix.os }} @@ -39,10 +39,10 @@ jobs: ver: "3.10" steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 - name: Set up Python - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 #v6.2.0 with: python-version: ${{ matrix.ver }} env: diff --git a/.github/workflows/ux-tests.yml b/.github/workflows/ux-tests.yml index f72d964a417..af7e69724ab 100644 --- a/.github/workflows/ux-tests.yml +++ b/.github/workflows/ux-tests.yml @@ -34,15 +34,15 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 - name: Set up Python 3.9 - uses: actions/setup-python@v5 + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 #v6.2.0 with: python-version: "3.9" - name: Cache pip packages - uses: actions/cache@v4 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae #v5.0.5 with: path: ~/.cache/pip key: pip-py3.9-${{ hashFiles('setup.py', 'setup.cfg') }} @@ -69,7 +69,7 @@ jobs: - name: Upload coverage data if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: coverage-unit path: | @@ -80,7 +80,7 @@ jobs: - name: Upload test results if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: junit-unit path: junit-unit.xml @@ -89,7 +89,7 @@ jobs: - name: Publish test results if: always() continue-on-error: true - uses: dorny/test-reporter@d61b558e8df85cb60d09ca3e5b09653b4477cea7 # v1 + uses: dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2 #v3.0.0 with: name: "Test Results — Unit" path: junit-unit.xml @@ -101,10 +101,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 - name: Set up Python 3.10 - uses: actions/setup-python@v5 + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 #v6.2.0 with: python-version: "3.10" @@ -120,7 +120,7 @@ jobs: tox -e spin -- --junit-xml=junit-spin.xml --cov=metaflow --cov-report=xml:coverage.xml --cov-branch - name: Upload coverage data if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: coverage-spin path: | @@ -130,7 +130,7 @@ jobs: include-hidden-files: true - name: Upload test results if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: junit-spin path: junit-spin.xml @@ -139,7 +139,7 @@ jobs: - name: Publish test results if: always() continue-on-error: true - uses: dorny/test-reporter@d61b558e8df85cb60d09ca3e5b09653b4477cea7 # v1 + uses: dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2 #v3.0.0 with: name: "Test Results — Spin" path: junit-spin.xml @@ -176,10 +176,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 - name: Free disk space - uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1 + uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be #v1.3.1 with: tool-cache: false android: true @@ -190,12 +190,12 @@ jobs: swap-storage: false - name: Set up Python 3.9 - uses: actions/setup-python@v5 + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 #v6.2.0 with: python-version: "3.9" - name: Cache pip packages - uses: actions/cache@v4 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae #v5.0.5 with: path: ~/.cache/pip key: pip-py3.9-${{ hashFiles('setup.py', 'setup.cfg') }} @@ -207,7 +207,7 @@ jobs: pip install -e ".[dev]" - name: Set up minikube - uses: medyagh/setup-minikube@aba8d5ff1666d19b9549133e3b92e70d4fc52cb7 + uses: medyagh/setup-minikube@e9e035a86bbc3caea26a450bd4dbf9d0c453682e #v0.0.21 with: driver: docker cpus: 2 @@ -215,7 +215,7 @@ jobs: - name: Restore minikube image cache id: image-cache - uses: actions/cache/restore@v4 + uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae #v5.0.5 with: path: /tmp/minikube-image-cache key: minikube-images-${{ matrix.backend }}-${{ hashFiles('devtools/Tiltfile') }} @@ -226,7 +226,7 @@ jobs: run: devtools/ci/load-minikube-images.sh - name: Cache Helm repos and charts - uses: actions/cache@v4 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae #v5.0.5 with: path: | ~/.cache/helm @@ -237,11 +237,11 @@ jobs: helm-charts- - name: Set up Helm - uses: azure/setup-helm@v4 + uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 #v5.0.0 - name: Cache Tilt binary id: tilt-cache - uses: actions/cache@v4 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae #v5.0.5 with: path: /usr/local/bin/tilt key: tilt-v0.33.11 @@ -290,7 +290,7 @@ jobs: - name: Store minikube image cache if: steps.image-cache.outputs.cache-hit != 'true' - uses: actions/cache/save@v4 + uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae #v5.0.5 with: path: /tmp/minikube-image-cache key: minikube-images-${{ matrix.backend }}-${{ hashFiles('devtools/Tiltfile') }} @@ -342,7 +342,7 @@ jobs: - name: Upload coverage data if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: coverage-${{ matrix.backend }} path: | @@ -354,7 +354,7 @@ jobs: - name: Upload test results if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: junit-${{ matrix.backend }} path: junit-${{ matrix.backend }}.xml @@ -363,7 +363,7 @@ jobs: - name: Publish test results if: always() continue-on-error: true - uses: dorny/test-reporter@d61b558e8df85cb60d09ca3e5b09653b4477cea7 # v1 + uses: dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2 #v3.0.0 with: name: "Test Results — ${{ matrix.backend }}" path: junit-${{ matrix.backend }}.xml @@ -384,7 +384,7 @@ jobs: - name: Upload Tilt logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: tilt-logs-${{ matrix.backend }} path: /tmp/tilt.log @@ -397,10 +397,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 - name: Set up Python 3.9 - uses: actions/setup-python@v5 + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 #v6.2.0 with: python-version: "3.9" @@ -408,20 +408,20 @@ jobs: run: pip install coverage[toml] - name: Download coverage data from all backends - uses: actions/download-artifact@v4 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1 with: pattern: coverage-* path: coverage-artifacts/ - name: Download test results from all backends - uses: actions/download-artifact@v4 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1 with: pattern: junit-* path: junit-artifacts/ - name: Publish combined test results continue-on-error: true - uses: dorny/test-reporter@d61b558e8df85cb60d09ca3e5b09653b4477cea7 # v1 + uses: dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2 #v3.0.0 with: name: "Test Results — All Backends" path: "junit-artifacts/**/*.xml" @@ -447,14 +447,14 @@ jobs: echo "**Total coverage: $total**" >> $GITHUB_STEP_SUMMARY - name: Upload coverage to Codecov - uses: codecov/codecov-action@v5 + uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f #v7.0.0 with: token: ${{ secrets.CODECOV_TOKEN }} files: combined-coverage.xml name: ux-combined - name: Upload combined coverage report - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: coverage-combined path: |