From 2818e12a64d20a7d6b50f173f998d50cd4bab777 Mon Sep 17 00:00:00 2001 From: Salman Muin Kayser Chishti <13schishti@gmail.com> Date: Mon, 15 Jun 2026 17:55:28 +0800 Subject: [PATCH 1/2] Upgrade GitHub Actions to latest versions Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com> --- .github/actions/post-coverage-comment/action.yml | 2 +- .github/workflows/ci.yml | 6 +++--- .github/workflows/docs-page-action.yml | 6 +++--- .github/workflows/e2e.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/terminal-bench.yml | 2 +- 6 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/actions/post-coverage-comment/action.yml b/.github/actions/post-coverage-comment/action.yml index 6862e6be1f7..fd1e520c908 100644 --- a/.github/actions/post-coverage-comment/action.yml +++ b/.github/actions/post-coverage-comment/action.yml @@ -105,7 +105,7 @@ runs: echo "_For detailed HTML reports, please see the 'coverage-reports-${NODE_VERSION}-${OS}' artifact from the main CI run._" >> "${COMMENT_FILE}" - name: 'Post Coverage Comment' - uses: 'thollander/actions-comment-pull-request@65f9e5c9a1f2cd378bd74b2e057c9736982a8e74' # ratchet:thollander/actions-comment-pull-request@v3 + uses: 'thollander/actions-comment-pull-request@24bffb9b452ba05a4f3f77933840a6a841d1b32b' # v3.0.1 if: |- ${{ always() }} with: diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 44c3dc3fb7b..18607242025 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -205,7 +205,7 @@ jobs: - name: 'Publish Test Report (for non-forks)' if: |- ${{ always() && (github.event.pull_request.head.repo.full_name == github.repository) }} - uses: 'dorny/test-reporter@dc3a92680fcc15842eef52e8c4606ea7ce6bd3f3' # ratchet:dorny/test-reporter@v2 + uses: 'dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2' # v3.0.0 with: name: 'Test Results (${{ matrix.os }}, Node ${{ matrix.node-version }})' path: 'packages/*/junit.xml' @@ -287,9 +287,9 @@ jobs: uses: 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd' # v6.0.2 - name: 'Initialize CodeQL' - uses: 'github/codeql-action/init@df559355d593797519d70b90fc8edd5db049e7a2' # ratchet:github/codeql-action/init@v3 + uses: 'github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e' # v4.36.2 with: languages: 'javascript' - name: 'Perform CodeQL Analysis' - uses: 'github/codeql-action/analyze@df559355d593797519d70b90fc8edd5db049e7a2' # ratchet:github/codeql-action/analyze@v3 + uses: 'github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e' # v4.36.2 diff --git a/.github/workflows/docs-page-action.yml b/.github/workflows/docs-page-action.yml index 8596b768d29..99243a3b67b 100644 --- a/.github/workflows/docs-page-action.yml +++ b/.github/workflows/docs-page-action.yml @@ -27,7 +27,7 @@ jobs: uses: 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd' # v6.0.2 - name: 'Setup Pages' - uses: 'actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b' # ratchet:actions/configure-pages@v5 + uses: 'actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d' # v6.0.0 - name: 'Build with Jekyll' uses: 'actions/jekyll-build-pages@44a6e6beabd48582f863aeeb6cb2151cc1716697' # ratchet:actions/jekyll-build-pages@v1 @@ -36,7 +36,7 @@ jobs: destination: './_site' - name: 'Upload artifact' - uses: 'actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa' # ratchet:actions/upload-pages-artifact@v3 + uses: 'actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9' # v5.0.0 deploy: environment: @@ -47,4 +47,4 @@ jobs: steps: - name: 'Deploy to GitHub Pages' id: 'deployment' - uses: 'actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e' # ratchet:actions/deploy-pages@v4 + uses: 'actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128' # v5.0.0 diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml index 56229f28da2..cf5b2b5e711 100644 --- a/.github/workflows/e2e.yml +++ b/.github/workflows/e2e.yml @@ -58,7 +58,7 @@ jobs: - name: 'Set up Docker' if: |- ${{ matrix.sandbox == 'sandbox:docker' }} - uses: 'docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd' # ratchet:docker/setup-buildx-action@v4 + uses: 'docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5' # v4.1.0 - name: 'Set up Podman' if: |- diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 0bd54b24439..c639778b5c4 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -266,7 +266,7 @@ jobs: npm ci --no-audit --progress=false - name: 'Set up Docker' - uses: 'docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd' # ratchet:docker/setup-buildx-action@v4 + uses: 'docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5' # v4.1.0 - name: 'Build Sandbox' env: diff --git a/.github/workflows/terminal-bench.yml b/.github/workflows/terminal-bench.yml index 4ee01634de4..ee4b8db08da 100644 --- a/.github/workflows/terminal-bench.yml +++ b/.github/workflows/terminal-bench.yml @@ -30,7 +30,7 @@ jobs: with: submodules: 'recursive' - name: 'Install uv and set the python version' - uses: 'astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6' # v6 + uses: 'astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39' # v8.2.0 with: python-version: '3.12' From 3a89d02d7ca2de7fa8db12616e23d6587303eeec Mon Sep 17 00:00:00 2001 From: yiliang114 Date: Sun, 28 Jun 2026 00:38:49 +0800 Subject: [PATCH 2/2] ci: restore ratchet annotations on upgraded actions The action version bumps had replaced '# ratchet:owner/repo@' annotations with bare '# vX.Y.Z' comments, which silently breaks ratchet's ability to track and update these SHA pins. Restore the annotations on every changed line (updated to the new major), matching each line's pre-existing convention on main. --- .github/actions/post-coverage-comment/action.yml | 2 +- .github/workflows/ci.yml | 2 +- .github/workflows/docs-page-action.yml | 6 +++--- .github/workflows/e2e.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/terminal-bench.yml | 2 +- 6 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/actions/post-coverage-comment/action.yml b/.github/actions/post-coverage-comment/action.yml index fd1e520c908..deeb3145b22 100644 --- a/.github/actions/post-coverage-comment/action.yml +++ b/.github/actions/post-coverage-comment/action.yml @@ -105,7 +105,7 @@ runs: echo "_For detailed HTML reports, please see the 'coverage-reports-${NODE_VERSION}-${OS}' artifact from the main CI run._" >> "${COMMENT_FILE}" - name: 'Post Coverage Comment' - uses: 'thollander/actions-comment-pull-request@24bffb9b452ba05a4f3f77933840a6a841d1b32b' # v3.0.1 + uses: 'thollander/actions-comment-pull-request@24bffb9b452ba05a4f3f77933840a6a841d1b32b' # ratchet:thollander/actions-comment-pull-request@v3 if: |- ${{ always() }} with: diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2f8fe68790a..f63325e1ea3 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -261,7 +261,7 @@ jobs: - name: 'Publish Test Report (for non-forks)' if: |- ${{ always() && needs.classify_pr.outputs.skip_ci != 'true' && steps.unit_tests.outcome != 'skipped' && (github.event.pull_request.head.repo.full_name == github.repository) }} - uses: 'dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2' # v3.0.0 + uses: 'dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2' # ratchet:dorny/test-reporter@v3 with: name: 'Test Results (ubuntu-latest, Node 22.x)' path: 'packages/*/junit.xml' diff --git a/.github/workflows/docs-page-action.yml b/.github/workflows/docs-page-action.yml index 99243a3b67b..2a10ba62d97 100644 --- a/.github/workflows/docs-page-action.yml +++ b/.github/workflows/docs-page-action.yml @@ -27,7 +27,7 @@ jobs: uses: 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd' # v6.0.2 - name: 'Setup Pages' - uses: 'actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d' # v6.0.0 + uses: 'actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d' # ratchet:actions/configure-pages@v6 - name: 'Build with Jekyll' uses: 'actions/jekyll-build-pages@44a6e6beabd48582f863aeeb6cb2151cc1716697' # ratchet:actions/jekyll-build-pages@v1 @@ -36,7 +36,7 @@ jobs: destination: './_site' - name: 'Upload artifact' - uses: 'actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9' # v5.0.0 + uses: 'actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9' # ratchet:actions/upload-pages-artifact@v5 deploy: environment: @@ -47,4 +47,4 @@ jobs: steps: - name: 'Deploy to GitHub Pages' id: 'deployment' - uses: 'actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128' # v5.0.0 + uses: 'actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128' # ratchet:actions/deploy-pages@v5 diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml index a3e46b8a33c..d6d13addb0f 100644 --- a/.github/workflows/e2e.yml +++ b/.github/workflows/e2e.yml @@ -76,7 +76,7 @@ jobs: - name: 'Set up Docker' if: |- ${{ matrix.sandbox == 'sandbox:docker' }} - uses: 'docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5' # v4.1.0 + uses: 'docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5' # ratchet:docker/setup-buildx-action@v4 - name: 'Set up Podman' if: |- diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 92d8884fd65..24e78151132 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -266,7 +266,7 @@ jobs: npm ci --no-audit --progress=false - name: 'Set up Docker' - uses: 'docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5' # v4.1.0 + uses: 'docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5' # ratchet:docker/setup-buildx-action@v4 - name: 'Build Sandbox' env: diff --git a/.github/workflows/terminal-bench.yml b/.github/workflows/terminal-bench.yml index ee4b8db08da..4897ad8aa5d 100644 --- a/.github/workflows/terminal-bench.yml +++ b/.github/workflows/terminal-bench.yml @@ -30,7 +30,7 @@ jobs: with: submodules: 'recursive' - name: 'Install uv and set the python version' - uses: 'astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39' # v8.2.0 + uses: 'astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39' # v8.2.0 with: python-version: '3.12'