From 7a1910981e1a02a84f5b651c0972a77f99ddcf38 Mon Sep 17 00:00:00 2001 From: Nicolas DUBIEN Date: Sun, 14 Jan 2024 09:46:29 +0100 Subject: [PATCH] =?UTF-8?q?=E2=AC=86=EF=B8=8F=20Upgrade=20actions/{downloa?= =?UTF-8?q?d,upload}-artifact=20action=20to=20v4=20(#4583)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * ⬆️ Upgrade actions/{download,upload}-artifact action to v3 This reverts commit e0e771b6d97f4962d279a7113b945b921c5c2c97. Applying suggestion: https://github.com/actions/download-artifact/issues/249#issuecomment-1873749814 * Bump for scorecard too * Bump download to latest * Apply suggestions from code review --- .github/workflows/build-status.yml | 28 ++++++++++++++-------------- .github/workflows/scorecard.yml | 2 +- 2 files changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/build-status.yml b/.github/workflows/build-status.yml index 7086aaac621..be58c9c6428 100644 --- a/.github/workflows/build-status.yml +++ b/.github/workflows/build-status.yml @@ -157,7 +157,7 @@ jobs: - name: Create bundles run: yarn pack:all - name: Upload production packages - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0 with: name: bundles path: packages/**/package.tgz @@ -186,7 +186,7 @@ jobs: YARN_ENABLE_HARDENED_MODE: 0 run: yarn install --immutable --immutable-cache --mode=skip-build - name: Download production packages - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1 with: name: bundles path: packages/ @@ -265,7 +265,7 @@ jobs: YARN_ENABLE_HARDENED_MODE: 0 run: yarn install --immutable --immutable-cache --mode=skip-build - name: Download production packages - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1 with: name: bundles path: packages/ @@ -318,7 +318,7 @@ jobs: YARN_ENABLE_HARDENED_MODE: 0 run: yarn install --immutable --immutable-cache --mode=skip-build - name: Download production packages - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1 with: name: bundles path: packages/ @@ -361,7 +361,7 @@ jobs: YARN_ENABLE_HARDENED_MODE: 0 run: yarn install --immutable --immutable-cache --mode=skip-build - name: Download production packages - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1 with: name: bundles path: packages/ @@ -433,7 +433,7 @@ jobs: YARN_ENABLE_HARDENED_MODE: 0 run: yarn install --immutable --immutable-cache --mode=skip-build - name: Download production packages - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1 with: name: bundles path: packages/ @@ -553,7 +553,7 @@ jobs: registry-url: 'https://registry.npmjs.org' check-latest: true - name: Download production packages - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1 with: name: bundles path: packages/ @@ -592,7 +592,7 @@ jobs: registry-url: 'https://registry.npmjs.org' check-latest: true - name: Download production packages - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1 with: name: bundles path: packages/ @@ -631,7 +631,7 @@ jobs: registry-url: 'https://registry.npmjs.org' check-latest: true - name: Download production packages - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1 with: name: bundles path: packages/ @@ -670,7 +670,7 @@ jobs: registry-url: 'https://registry.npmjs.org' check-latest: true - name: Download production packages - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1 with: name: bundles path: packages/ @@ -709,7 +709,7 @@ jobs: registry-url: 'https://registry.npmjs.org' check-latest: true - name: Download production packages - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1 with: name: bundles path: packages/ @@ -748,7 +748,7 @@ jobs: registry-url: 'https://registry.npmjs.org' check-latest: true - name: Download production packages - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1 with: name: bundles path: packages/ @@ -787,7 +787,7 @@ jobs: registry-url: 'https://registry.npmjs.org' check-latest: true - name: Download production packages - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1 with: name: bundles path: packages/ @@ -826,7 +826,7 @@ jobs: registry-url: 'https://registry.npmjs.org' check-latest: true - name: Download production packages - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1 with: name: bundles path: packages/ diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 02f20e455f6..45e3c9711d8 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -59,7 +59,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: 'Upload artifact' - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0 with: name: SARIF file path: results.sarif