ci: Updated all the GitHub Actions#3277
Conversation
Greptile SummaryThis PR upgrades all GitHub Actions across 8 workflow files to use immutable commit SHA pins instead of mutable version tags, improving supply-chain security. It also bumps several actions to newer major versions (e.g.,
Confidence Score: 4/5Safe to merge for all workflows except ux-tests.yml, where the upload/download artifact version mismatch could silently break the coverage-report job. The upload-artifact (v7) and download-artifact (v8) actions are at different major versions in ux-tests.yml. GitHub has previously required these two actions to share the same major version (the v3→v4 migration broke cross-version artifact reads), so this mismatch could cause the coverage-report job to fail to retrieve any artifacts uploaded by earlier jobs. .github/workflows/ux-tests.yml — the upload-artifact/download-artifact major-version mismatch should be resolved before merging. Important Files Changed
Reviews (1): Last reviewed commit: "Updated github actions" | Re-trigger Greptile |
![greptile-apps[bot]](https://avatars.githubusercontent.com/in/867647?s=60&v=4){kind=small}
| uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1 | ||
| with: | ||
| pattern: coverage-* | ||
| path: coverage-artifacts/ | ||
|
|
||
| - name: Download test results from all backends | ||
| uses: actions/download-artifact@v4 | ||
| uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1 |
There was a problem hiding this comment.
upload-artifact and download-artifact major version mismatch
Artifacts are uploaded with upload-artifact@v7.0.1 but downloaded with download-artifact@v8.0.1. GitHub has historically required these two actions to use the same major version (the v3→v4 migration, for example, required upgrading both simultaneously because the storage format changed). If the artifact schema changed between v7 and v8, the download-artifact step in the coverage-report job will fail to find or decode the artifacts produced by the earlier jobs, silently breaking coverage reporting.
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #3277 +/- ##
=========================================
Coverage ? 30.34%
=========================================
Files ? 381
Lines ? 52551
Branches ? 9273
=========================================
Hits ? 15946
Misses ? 35427
Partials ? 1178 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
PR Type
Summary
This PR updates all the GitHub Actions to use latest release versions.
Pinned commit SHAs rather than version tags.