From 1a64afb4f84251809c5755348ccd327f02b8dceb Mon Sep 17 00:00:00 2001 From: Ning Shang Date: Wed, 27 May 2026 14:50:54 -0700 Subject: [PATCH 1/3] GHA: update dependent actions Update dependencies. --- .github/workflows/clang-sa.yml | 3 ++- .github/workflows/codeql-analysis.yml | 7 ++++--- .github/workflows/publish-docs.yml | 5 +++-- .github/workflows/release.yml | 5 +++-- .github/workflows/sanity.yml | 8 +++++--- 5 files changed, 17 insertions(+), 11 deletions(-) diff --git a/.github/workflows/clang-sa.yml b/.github/workflows/clang-sa.yml index b021f58..4bcecdc 100644 --- a/.github/workflows/clang-sa.yml +++ b/.github/workflows/clang-sa.yml @@ -22,7 +22,8 @@ jobs: steps: - name: 'Checkout repository' - uses: actions/checkout@v4.1.1 + # v6.0.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd with: # We must fetch at least the immediate parents so that if this is # a pull request then we can checkout the head. diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 02e1173..1f30026 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -17,7 +17,7 @@ jobs: strategy: fail-fast: false matrix: - os: [ubuntu-22.04] + os: [ubuntu-26.04] compiler_c: [gcc] compiler_cxx: [g++] language: [ 'cpp' ] @@ -27,7 +27,8 @@ jobs: steps: - name: 'Checkout repository' - uses: actions/checkout@v4.1.1 + # v6.0.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # Initializes the CodeQL tools for scanning. - name: 'Initialize CodeQL' @@ -52,4 +53,4 @@ jobs: ./scripts/build.sh - name: 'Perform CodeQL analysis' - uses: github/codeql-action/analyze@v2 + uses: github/codeql-action/analyze@v2.25.5 diff --git a/.github/workflows/publish-docs.yml b/.github/workflows/publish-docs.yml index 9aad4c9..e1f97d7 100644 --- a/.github/workflows/publish-docs.yml +++ b/.github/workflows/publish-docs.yml @@ -11,10 +11,11 @@ jobs: runs-on: ${{ matrix.os }} strategy: matrix: - os: [ubuntu-22.04] + os: [ubuntu-26.04] steps: - name: Checkout - uses: actions/checkout@v4.1.1 + # v6.0.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - name: Install dependencies run: | sudo apt update diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 484695b..cc664a6 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -11,10 +11,11 @@ jobs: runs-on: ${{ matrix.os }} strategy: matrix: - os: [ubuntu-22.04] + os: [ubuntu-26.04] steps: - name: Checkout code - uses: actions/checkout@v4.1.1 + # v6.0.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - name: Set RELEASE_VERSION as tag version run: | echo "RELEASE_VERSION=${GITHUB_REF#refs/tags/v}" >> $GITHUB_ENV diff --git a/.github/workflows/sanity.yml b/.github/workflows/sanity.yml index f7a6de7..56f91ba 100644 --- a/.github/workflows/sanity.yml +++ b/.github/workflows/sanity.yml @@ -11,12 +11,13 @@ jobs: runs-on: ${{ matrix.os }} strategy: matrix: - os: [ubuntu-22.04] + os: [ubuntu-26.04] compiler_c: [gcc, clang] compiler_cxx: [g++, clang++] steps: - name: Checkout - uses: actions/checkout@v4.1.1 + # v6.0.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - name: Install dependencies run: | sudo apt update @@ -42,7 +43,8 @@ jobs: runs-on: ${{ matrix.os }} steps: - name: 'Checkout repository' - uses: actions/checkout@v4.1.1 + # v6.0.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - if: ${{ matrix.os == 'ubuntu-latest' }} name: 'Install shellcheck on Ubuntu' run: | From a7263512ad81f516b0ef4b28c0dab9e855f7ba11 Mon Sep 17 00:00:00 2001 From: Ning Shang Date: Wed, 27 May 2026 15:01:56 -0700 Subject: [PATCH 2/3] codeql-action: pin v2.25.5 commit SHA Pin to a commit SHA. --- .github/workflows/codeql-analysis.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 1f30026..684593b 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -53,4 +53,5 @@ jobs: ./scripts/build.sh - name: 'Perform CodeQL analysis' - uses: github/codeql-action/analyze@v2.25.5 + # v2.25.5 + uses: github/codeql-action/analyze@v84498526a009a99c875e83ef4821a8ba52de7c22 From 9e65ab1237d6fba6ef106d7681c93a75b1543b2e Mon Sep 17 00:00:00 2001 From: Ning Shang Date: Wed, 27 May 2026 15:19:51 -0700 Subject: [PATCH 3/3] Use ubuntu-24.04 as runners ubuntu-26.04 is still in beta. We'll migrate to them later, and use 24.04 for now. --- .github/workflows/clang-sa.yml | 2 +- .github/workflows/codeql-analysis.yml | 2 +- .github/workflows/publish-docs.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/sanity.yml | 6 +++--- 5 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/clang-sa.yml b/.github/workflows/clang-sa.yml index 4bcecdc..36ee41e 100644 --- a/.github/workflows/clang-sa.yml +++ b/.github/workflows/clang-sa.yml @@ -15,7 +15,7 @@ jobs: strategy: fail-fast: true matrix: - os: [ubuntu-22.04] + os: [ubuntu-24.04] defaults: run: shell: bash -euxo pipefail {0} diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 684593b..1cdcbe6 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -17,7 +17,7 @@ jobs: strategy: fail-fast: false matrix: - os: [ubuntu-26.04] + os: [ubuntu-24.04] compiler_c: [gcc] compiler_cxx: [g++] language: [ 'cpp' ] diff --git a/.github/workflows/publish-docs.yml b/.github/workflows/publish-docs.yml index e1f97d7..473a618 100644 --- a/.github/workflows/publish-docs.yml +++ b/.github/workflows/publish-docs.yml @@ -11,7 +11,7 @@ jobs: runs-on: ${{ matrix.os }} strategy: matrix: - os: [ubuntu-26.04] + os: [ubuntu-24.04] steps: - name: Checkout # v6.0.2 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index cc664a6..418d974 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -11,7 +11,7 @@ jobs: runs-on: ${{ matrix.os }} strategy: matrix: - os: [ubuntu-26.04] + os: [ubuntu-24.04] steps: - name: Checkout code # v6.0.2 diff --git a/.github/workflows/sanity.yml b/.github/workflows/sanity.yml index 56f91ba..b5f38aa 100644 --- a/.github/workflows/sanity.yml +++ b/.github/workflows/sanity.yml @@ -11,7 +11,7 @@ jobs: runs-on: ${{ matrix.os }} strategy: matrix: - os: [ubuntu-26.04] + os: [ubuntu-24.04] compiler_c: [gcc, clang] compiler_cxx: [g++, clang++] steps: @@ -39,13 +39,13 @@ jobs: fail-fast: false # Run on Linux and macos matrix: - os: [ubuntu-latest, macos-latest] + os: [ubuntu-24.04, macos-latest] runs-on: ${{ matrix.os }} steps: - name: 'Checkout repository' # v6.0.2 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - - if: ${{ matrix.os == 'ubuntu-latest' }} + - if: ${{ matrix.os == 'ubuntu-24.04' }} name: 'Install shellcheck on Ubuntu' run: | sudo apt update