From 1862bd8b7951069b4a6144e21fe39abc53b200a1 Mon Sep 17 00:00:00 2001 From: pozil Date: Thu, 23 Jul 2026 15:39:10 +0200 Subject: [PATCH] ci: unified GH action version + used SemVer Updated all GitHub Actions to latest versions with semantic versioning: - actions/cache: v6.0.0 - actions/checkout: v7.0.0 - actions/github-script: v9.0.0 - actions/setup-node: v4.0.0 - codecov/codecov-action: v7.0.0 - dependabot/fetch-metadata: v3.1.0 - forcedotcom/run-code-analyzer: v2.12.0 - peter-evans/create-pull-request: v8.1.1 - peter-evans/repository-dispatch: v4.0.1 - pmd/pmd-github-action: v2.0.0 - pozil/auto-assign-issue: v4.0.1 - pozil/codetour-watch: v4.0.0 - volta-cli/action: v5.0.0 Co-Authored-By: Claude Sonnet 4.5 --- .github/workflows/auto-assign.yml | 2 +- .github/workflows/ci-pr.yml | 14 +++++++------- .github/workflows/ci.yml | 16 ++++++++-------- .github/workflows/codetour-watch.yml | 4 ++-- .github/workflows/manual-packaging.yml | 2 +- .github/workflows/new-issue-welcome.yml | 2 +- .github/workflows/packaging.yml | 4 ++-- 7 files changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/workflows/auto-assign.yml b/.github/workflows/auto-assign.yml index 7dbaf7c0..cffd132d 100644 --- a/.github/workflows/auto-assign.yml +++ b/.github/workflows/auto-assign.yml @@ -9,7 +9,7 @@ jobs: runs-on: trailheadapps-Ubuntu steps: - name: 'Auto-assign issue' - uses: pozil/auto-assign-issue@v2 + uses: pozil/auto-assign-issue@v4.0.1 with: repo-token: ${{ secrets.GITHUB_TOKEN }} assignees: ${{ vars.DEFAULT_ISSUE_ASSIGNEE }} diff --git a/.github/workflows/ci-pr.yml b/.github/workflows/ci-pr.yml index 4f888120..eab8a7df 100644 --- a/.github/workflows/ci-pr.yml +++ b/.github/workflows/ci-pr.yml @@ -37,16 +37,16 @@ jobs: steps: # Checkout the source code - name: 'Checkout source code' - uses: actions/checkout@v4 + uses: actions/checkout@v7.0.0 # Install Volta to enforce proper node and package manager versions - name: 'Install Volta' - uses: volta-cli/action@v4 + uses: volta-cli/action@v5.0.0 # Cache node_modules to speed up the process - name: 'Restore node_modules cache' id: cache-npm - uses: actions/cache@v4 + uses: actions/cache@v6.0.0 with: path: node_modules key: npm-${{ hashFiles('**/package-lock.json') }} @@ -75,7 +75,7 @@ jobs: # Upload code coverage data - name: 'Upload code coverage for LWC to Codecov.io' - uses: codecov/codecov-action@v4 + uses: codecov/codecov-action@v7.0.0 with: token: ${{ secrets.CODECOV_TOKEN }} flags: LWC @@ -94,7 +94,7 @@ jobs: steps: - name: 'Fetch Dependabot metadata' id: dependabot - uses: dependabot/fetch-metadata@v2 + uses: dependabot/fetch-metadata@v3.1.0 - name: 'Check auto merge conditions' id: auto-merge @@ -124,7 +124,7 @@ jobs: steps: # Checkout the source code - name: 'Checkout source code' - uses: actions/checkout@v4 + uses: actions/checkout@v7.0.0 # Run PMD scan - name: 'Run PMD scan' @@ -192,7 +192,7 @@ jobs: # Upload code coverage data - name: 'Upload code coverage for Apex to Codecov.io' - uses: codecov/codecov-action@v4 + uses: codecov/codecov-action@v7.0.0 with: token: ${{ secrets.CODECOV_TOKEN }} flags: Apex diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 479f2b93..0520d610 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -18,16 +18,16 @@ jobs: steps: # Checkout the source code - name: 'Checkout source code' - uses: actions/checkout@v4 + uses: actions/checkout@v7.0.0 # Install Volta to enforce proper node and package manager versions - name: 'Install Volta' - uses: volta-cli/action@v4 + uses: volta-cli/action@v5.0.0 # Cache node_modules to speed up the process - name: 'Restore node_modules cache' id: cache-npm - uses: actions/cache@v4 + uses: actions/cache@v6.0.0 with: path: node_modules key: npm-${{ hashFiles('**/package-lock.json') }} @@ -56,7 +56,7 @@ jobs: # Upload code coverage data - name: 'Upload code coverage for LWC to Codecov.io' - uses: codecov/codecov-action@v4 + uses: codecov/codecov-action@v7.0.0 with: token: ${{ secrets.CODECOV_TOKEN }} flags: LWC @@ -68,7 +68,7 @@ jobs: steps: # Checkout the source code - name: 'Checkout source code' - uses: actions/checkout@v4 + uses: actions/checkout@v7.0.0 # Run PMD scan - name: 'Run PMD scan' @@ -130,7 +130,7 @@ jobs: # Upload code coverage data - name: 'Upload code coverage for Apex to Codecov.io' - uses: codecov/codecov-action@v4 + uses: codecov/codecov-action@v7.0.0 with: token: ${{ secrets.CODECOV_TOKEN }} flags: Apex @@ -146,7 +146,7 @@ jobs: steps: # Checkout the source code with history - name: 'Checkout source code' - uses: actions/checkout@v4 + uses: actions/checkout@v7.0.0 # Check for package changes using git diff - name: 'Check for package changes' @@ -207,7 +207,7 @@ jobs: # Trigger packaging workflow if needed - name: 'Trigger packaging workflow if needed' - uses: peter-evans/repository-dispatch@v3 + uses: peter-evans/repository-dispatch@v4.0.1 if: steps.checkForChanges.outputs.changes != '[]' with: token: ${{ secrets.REPO_ACCESS_TOKEN }} diff --git a/.github/workflows/codetour-watch.yml b/.github/workflows/codetour-watch.yml index 84addf18..e2d24aa0 100644 --- a/.github/workflows/codetour-watch.yml +++ b/.github/workflows/codetour-watch.yml @@ -10,10 +10,10 @@ jobs: if: github.actor != 'trailheadapps-bot' && github.actor != 'dependabot[bot]' steps: - name: 'Checkout source code' - uses: actions/checkout@v4 + uses: actions/checkout@v7.0.0 - name: 'Watch CodeTour changes' - uses: pozil/codetour-watch@v3.0.0 + uses: pozil/codetour-watch@v4.0.0 skip-codetour-watch: if: github.actor == 'trailheadapps-bot' || github.actor == 'dependabot[bot]' diff --git a/.github/workflows/manual-packaging.yml b/.github/workflows/manual-packaging.yml index 47868b5c..98f35514 100644 --- a/.github/workflows/manual-packaging.yml +++ b/.github/workflows/manual-packaging.yml @@ -17,7 +17,7 @@ jobs: steps: # Trigger packaging workflow - name: 'Trigger packaging workflow' - uses: peter-evans/repository-dispatch@v3 + uses: peter-evans/repository-dispatch@v4.0.1 with: token: ${{ secrets.REPO_ACCESS_TOKEN }} event-type: start-packaging diff --git a/.github/workflows/new-issue-welcome.yml b/.github/workflows/new-issue-welcome.yml index d91afa01..4a663ecf 100644 --- a/.github/workflows/new-issue-welcome.yml +++ b/.github/workflows/new-issue-welcome.yml @@ -8,7 +8,7 @@ jobs: comment: runs-on: trailheadapps-Ubuntu steps: - - uses: actions/github-script@v6 + - uses: actions/github-script@v9.0.0 with: script: | await github.rest.issues.createComment({ diff --git a/.github/workflows/packaging.yml b/.github/workflows/packaging.yml index 48f1d109..1b70fea6 100644 --- a/.github/workflows/packaging.yml +++ b/.github/workflows/packaging.yml @@ -25,7 +25,7 @@ jobs: # Checkout the source code - name: 'Checkout source code' - uses: actions/checkout@v4 + uses: actions/checkout@v7.0.0 with: ref: ${{ github.event.client_payload.ref }} @@ -112,7 +112,7 @@ jobs: # Create PR for new package version - name: 'Create PR for new package version' id: create-pr - uses: peter-evans/create-pull-request@v6 + uses: peter-evans/create-pull-request@v8.1.1 with: title: 'Package: ${{ matrix.package }} - New version: ${{ steps.createPackageVersion.outputs.packageVersionId }}' body: 'Released new package version ${{ steps.createPackageVersion.outputs.packageVersionId }} for package ${{ matrix.package }}'